| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | ≥ 3.7.0, < 3.7.5≥ 3.7.0+incompatible, < 3.7.5+incompatible≥ 3.8.0, < 3.8.2≥ 3.8.0+incompatible, < 3.8.2+incompatible< 3.6.7-rc1< 3.6.7-rc1+incompatible | 3.7.53.7.5+incompatible3.8.23.8.2+incompatible3.6.7-rc13.6.7-rc1+incompatible |
| mattermost server | ≥ 3.7.0, < 3.7.5≥ 3.8.0, < 3.8.2< 3.6.7 | 3.7.53.8.23.6.7 |
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. The X.509 certificate validation can be skipped for a TLS-based e-mail server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free