CVE-2019-20864

HIGH 7.5CVE-2019-20864 · Published 19/06/2020 · updated 17/06/2026

In short

CVE-2019-20864 is a HIGH (CVSS 7.5) vulnerability affecting mattermost plugins (mattermost).
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 59.0% of all vulnerabilities.
Fix: update to 5.13.0 or later.

Package	Affected versions	Patched versions
mattermost plugins mattermost	`< 5.13.0`	`5.13.0`

Description

An issue was discovered in Mattermost Plugins before 5.13.0. The GitHub plugin allows an attacker to attach his Mattermost account to a different person's GitHub account.

References

mattermost.com/security-updates · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free