CVE-2017-18900: Critical severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report.
Affected Software
2 affected components
Mattermost Mattermost Server<3.10.3
Mattermost Mattermost Server>=4.0.0<4.0.4
Event History
Jun 19, 2020
CVE Published
via MITRE·06:43 PM
Data Sourced
via MITRE·06:43 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18900?
CVE-2017-18900 has a medium severity rating primarily due to its potential for CSV injection.
2
How do I fix CVE-2017-18900?
To remediate CVE-2017-18900, upgrade Mattermost Server to version 4.1.0 or later.
3
What versions of Mattermost Server are affected by CVE-2017-18900?
CVE-2017-18900 affects Mattermost Server versions prior to 4.1.0, specifically 3.10.3 and 4.0.4.
4
What type of vulnerability is CVE-2017-18900?
CVE-2017-18900 is classified as a CSV injection vulnerability.
5
Can CVE-2017-18900 impact data security?
Yes, CVE-2017-18900 can potentially compromise data security through mishandling of CSV files.