CVE-2021-37862CWE-754

Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into signing up using…

Low · published December 17, 2021

CVSS v3.1
3.7
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into signing up using attacker-controlled email addresses via crafted invitation token.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00689 · 52.2th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2021-12-17T16:10Z
EPSS history
Timeline
  • 17 DEC 16:10Z
    Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into signing up using…
    cvelistv5