CVE-2017-18872

An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2020-06-19

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Mattermost Server (Mattermost)

References

• https://mattermost.com/security-updates/