Security Advisory

CVE-2017-18890

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-19 18:08:53
Last updated 2024-08-05 21:37:44
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows an attacker to create a button that, when pressed by a user, launches an API request.