| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | ≥ 4.2.0-rc1, < 4.2.1≥ 4.2.0-rc1+incompatible, < 4.2.1+incompatible≥ 4.3.0-rc1, < 4.3.0≥ 4.3.0-rc1+incompatible, < 4.3.0+incompatible< 4.1.2< 4.1.2+incompatible | 4.2.14.2.1+incompatible4.3.04.3.0+incompatible4.1.24.1.2+incompatible |
| mattermost server | = 4.3.0≥ 4.2.0, < 4.2.1< 4.1.2 | 4.2.14.1.2 |
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free