CVE-2017-18905

An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidation was mishandled.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2020-06-19

Last modified

2024-08-05

Weaknesses

CWE-613

Affected products

• Mattermost Server (Mattermost)

References

• https://mattermost.com/security-updates/