CVE-2017-18897: Medium severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. It mishandles a deny action for a redirection.
Affected Software
6 affected components
Mattermost Mattermost Server<4.0.5
Mattermost Mattermost Server>=4.1.0<4.1.1
Mattermost Mattermost Server=4.2.0-rc1
Mattermost Mattermost Server=4.2.0-rc2
Mattermost Mattermost Server=4.2.0-rc3
Mattermost Mattermost Server=4.2.0-rc4
Event History
Jun 19, 2020
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
Description
Frequently Asked Questions
1
What is CVE-2017-18897?
CVE-2017-18897 is a vulnerability in Mattermost Server before version 4.2.0, 4.1.1, and 4.0.5 when used as an OAuth 2.0 service provider.
2
How does CVE-2017-18897 affect Mattermost Server?
CVE-2017-18897 affects Mattermost Server when used as an OAuth 2.0 service provider and mishandles a deny action for a redirection.
3
What is the severity level of CVE-2017-18897?
CVE-2017-18897 has a severity level of medium with a CVSS score of 6.1.
4
Which versions of Mattermost Server are affected by CVE-2017-18897?
Mattermost Server versions 4.0.5, 4.1.0, 4.1.1, and 4.2.0-rc1, 4.2.0-rc2, 4.2.0-rc3, and 4.2.0-rc4 are affected by CVE-2017-18897.
5
How can I fix CVE-2017-18897?
To fix CVE-2017-18897, upgrade your Mattermost Server to version 4.2.0 or higher.