CVE-2017-18916

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. API endpoint access control does not honor an integration permission restriction.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2020-06-19

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Mattermost Server (Mattermost)

References

• https://mattermost.com/security-updates/