CVE-2018-21251: Critical severity mattermost vulnerability
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be bypassed if the channel name were not the same in the params and the body.
Affected Software
7 affected components
Mattermost Mattermost Server<5.1.1
Mattermost Mattermost Server=5.2.0-rc1
Mattermost Mattermost Server=5.2.0-rc2
Mattermost Mattermost Server=5.2.0-rc3
Mattermost Mattermost Server=5.2.0-rc4
Mattermost Mattermost Server=5.2.0-rc5
Mattermost Mattermost Server=5.2.0-rc6
Event History
Jun 19, 2020
CVE Published
via MITRE·04:49 PM
Data Sourced
via MITRE·04:49 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-21251?
CVE-2018-21251 is classified as a medium severity vulnerability due to its potential to allow unauthorized access.
2
How do I fix CVE-2018-21251?
To fix CVE-2018-21251, you need to update Mattermost Server to version 5.2 or higher.
3
Which versions are affected by CVE-2018-21251?
CVE-2018-21251 affects Mattermost Server versions prior to 5.2 and version 5.1.1.
4
Can CVE-2018-21251 be exploited remotely?
Yes, CVE-2018-21251 can be exploited remotely if the vulnerability is present in the server.
5
What type of vulnerability is CVE-2018-21251?
CVE-2018-21251 is an authorization bypass vulnerability.