CVE-2019-20841: CSRF
Published Jun 19, 2020
·Updated
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks.
Affected Software
8 affected components
Mattermost Mattermost Server<5.9.7
Mattermost Mattermost Server>=5.15.0<5.15.4
Mattermost Mattermost Server>=5.16.0<5.16.4
Mattermost Mattermost Server>=5.17.0<5.17.2
Mattermost Mattermost Server=5.18.0-rc1
Mattermost Mattermost Server=5.18.0-rc2
Mattermost Mattermost Server=5.18.0-rc3
Mattermost Mattermost Server=5.18.0-rc4
Event History
Jun 19, 2020
CVE Published
via MITRE·01:17 PM
Data Sourced
via MITRE·01:17 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20841?
CVE-2019-20841 is a medium severity vulnerability that allows for potential account takeover through CSRF attacks.
2
How do I fix CVE-2019-20841?
To fix CVE-2019-20841, upgrade Mattermost Server to version 5.18.0 or later.
3
What platforms are affected by CVE-2019-20841?
CVE-2019-20841 affects Mattermost Server versions prior to 5.18.0, as well as specific versions in the 5.9.x to 5.17.x range.
4
Can CVE-2019-20841 lead to data breaches?
Yes, CVE-2019-20841 can potentially lead to unauthorized access and data breaches if exploitation is successful.
5
Is there a workaround for CVE-2019-20841?
There are no official workarounds for CVE-2019-20841; updating to a secure version is the recommended action.