CVE-2018-21254

An issue was discovered in Mattermost Server before 5.1

published June 19, 2020

CVSS
—
EPSS
1%
Percentile
48.8
In the wild
Unconfirmed
What it is

An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control (for direct-message channel creation) via the Message slash command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00615 · 48.8th percentile
Published
2020-06-19T16:49Z
EPSS history
Timeline
  • 19 JUN 16:49Z
    An issue was discovered in Mattermost Server before 5.1
    cvelistv5