| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | all versions | |
| github.com/mattermost/mattermost-server/v5 | all versions | |
| github.com/mattermost/mattermost-server/v6 | ≥ 6.4.0, < 6.5.0 | 6.5.0 |
| mattermost server | < 6.5.0 | 6.5.0 |
Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free