Mattermost Server: initial_load API exposes unnecessary information

ALTO 7.5CVE-2016-11066 · GHSA-r93j-3mmp-px57 · GO-2025-4047 · Published 19/06/2020 · updated 17/06/2026

In breve

CVE-2016-11066 è una vulnerabilità ALTO (CVSS 7.5) che riguarda github.com/mattermost/mattermost-server, mattermost server (mattermost).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.0% delle vulnerabilità.
Correzione: aggiornare a 3.1.1, 3.2.0 o successiva.

Package	Affected versions	Patched versions
github.com/mattermost/mattermost-server Go	`< 3.1.1all versions`	`3.1.1`
mattermost server mattermost	`< 3.2.0`	`3.2.0`

An issue was discovered in Mattermost Server before 3.1.1. The initial_load API disclosed unnecessary personal information.

NVD description

An issue was discovered in Mattermost Server before 3.2.0. The initial_load API disclosed unnecessary personal information.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 3.1.1all versions

3.1.1

< 3.2.0

3.2.0

Altre vulnerabilità di github.com/mattermost/mattermost-server

Vedi tutto →