CVE-2017-18914: Medium severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. An external link can occur on an error page even if it is not on an allowlist.
Affected Software
3 affected components
Mattermost Mattermost Server<3.6.7
Mattermost Mattermost Server>=3.7.0<3.7.5
Mattermost Mattermost Server>=3.8.0<3.8.2
Event History
Jun 19, 2020
CVE Published
via MITRE·07:16 PM
Data Sourced
via MITRE·07:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18914?
The severity of CVE-2017-18914 is medium with a score of 5.3.
2
What is the affected software for CVE-2017-18914?
The affected software for CVE-2017-18914 is Mattermost Server versions before 3.8.2, 3.7.5, and 3.6.7.
3
What is the vulnerability of CVE-2017-18914?
The vulnerability of CVE-2017-18914 is an external link can occur on an error page even if it is not on an allowlist.
4
How can I fix CVE-2017-18914?
To fix CVE-2017-18914, upgrade to Mattermost Server version 3.8.2, 3.7.5, or 3.6.7.
5
Where can I find more information about CVE-2017-18914?
For more information about CVE-2017-18914, you can visit the following link: https://mattermost.com/security-updates/