Mattermost Server allows an attacker to specify a full pathname of a log file

CRÍTICO 9.8CVE-2017-18912 · GHSA-m2ch-x2q7-2284 · GO-2026-4487 · Published 19/06/2020 · updated 17/06/2026

En resumen

CVE-2017-18912 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a github.com/mattermost/mattermost-server, mattermost server (mattermost).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 72.3% de las vulnerabilidades.
Solución: actualizar a 3.7.4-0.20170404171331-0b5c0794fdcb, 3.7.5, 3.8.2, 3.6.7 o posterior.

Package	Affected versions	Patched versions
github.com/mattermost/mattermost-server Go	`< 3.7.4-0.20170404171331-0b5c0794fdcball versions`	`3.7.4-0.20170404171331-0b5c0794fdcb`
mattermost server mattermost	`≥ 3.7.0, < 3.7.5≥ 3.8.0, < 3.8.2< 3.6.7`	`3.7.53.8.23.6.7`

An issue was discovered in Mattermost Server before 3.7.5. It allows an attacker to specify a full pathname of a log file.

NVD description

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. It allows an attacker to specify a full pathname of a log file.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

En resumen

CVE-2017-18912 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a github.com/mattermost/mattermost-server, mattermost server (mattermost).

Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 72.3% de las vulnerabilidades.

Solución: actualizar a 3.7.4-0.20170404171331-0b5c0794fdcb, 3.7.5, 3.8.2, 3.6.7 o posterior.

Package

Affected versions

Patched versions

< 3.7.4-0.20170404171331-0b5c0794fdcball versions

3.7.4-0.20170404171331-0b5c0794fdcb

≥ 3.7.0, < 3.7.5≥ 3.8.0, < 3.8.2< 3.6.7

3.7.53.8.23.6.7

Más vulnerabilidades de github.com/mattermost/mattermost-server

Ver todo →