CVE-2017-18888: SQL Injection
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows SQL injection during the fetching of multiple posts.
Affected Software
6 affected components
Mattermost Mattermost Server<4.1.2
Mattermost Mattermost Server>=4.2.0<4.2.1
Mattermost Mattermost Server=4.3.0-rc1
Mattermost Mattermost Server=4.3.0-rc2
Mattermost Mattermost Server=4.3.0-rc3
Mattermost Mattermost Server=4.3.0-rc4
Event History
Jun 19, 2020
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18888?
The severity of CVE-2017-18888 is classified as high due to its potential for SQL injection.
2
How do I fix CVE-2017-18888?
To fix CVE-2017-18888, upgrade Mattermost Server to version 4.3.0 or later.
3
Which versions of Mattermost Server are affected by CVE-2017-18888?
CVE-2017-18888 affects Mattermost Server versions prior to 4.3.0, 4.2.1, and 4.1.2.
4
What type of attack does CVE-2017-18888 facilitate?
CVE-2017-18888 facilitates SQL injection attacks during the fetching of multiple posts.
5
Is there any workaround for CVE-2017-18888?
There are no recommended workarounds for CVE-2017-18888; upgrading to a patched version is the only solution.