| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | ≥ 4.3.0-rc1, < 4.3.4≥ 4.3.0-rc1+incompatible, < 4.3.4+incompatible≥ 4.4.0-rc1, < 4.4.5≥ 4.4.0-rc1+incompatible, < 4.4.5+incompatible≥ 4.5.0-rc1, < 4.5.0≥ 4.5.0-rc1+incompatible, < 4.5.0+incompatible< 4.2.2< 4.2.2+incompatible | 4.3.44.3.4+incompatible4.4.54.4.5+incompatible4.5.04.5.0+incompatible4.2.24.2.2+incompatible |
| mattermost server | = 4.5.0≥ 4.3.0, < 4.3.4≥ 4.4.0, < 4.4.5< 4.2.2 | 4.3.44.4.54.2.2 |
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service (application crash) via an @ character before a JavaScript field name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free