CVE-2017-18908
published 2020-06-19CVE-2017-18908: An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. A password-reset request was sometime sent to an attacker-provided e-mail address.
PriorityP349critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.18%
64.3th percentile
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. A password-reset request was sometime sent to an attacker-provided e-mail address.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | mattermost_mattermost-server | >= 0 < 3.9.1-rc1+incompatible | 3.9.1-rc1+incompatible |
| github.com | mattermost_mattermost-server | >= 0 < 3.9.1-rc1 | 3.9.1-rc1 |
| github.com | mattermost_mattermost-server | >= 3.10.0 < 3.10.1 | 3.10.1 |
| github.com | mattermost_mattermost-server | >= 3.10.0+incompatible < 3.10.1+incompatible | 3.10.1+incompatible |
| mattermost | mattermost_server | < 3.9.2 | 3.9.2 |
| mattermost | mattermost_server | >= 3.10.0 < 3.10.2 | 3.10.2 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Mattermost Server password reset email requests can be sent to attacker-provided email addresses in github.com/mattermost/mattermost-server
osv·2026-02-17
CVE-2017-18908 Mattermost Server password reset email requests can be sent to attacker-provided email addresses in github.com/mattermost/mattermost-server
Mattermost Server password reset email requests can be sent to attacker-provided email addresses in github.com/mattermost/mattermost-server
Mattermost Server password reset email requests can be sent to attacker-provided email addresses in github.com/mattermost/mattermost-server
OSV
Mattermost Server password reset email requests can be sent to attacker-provided email addresses
osv·2022-05-24
CVE-2017-18908 [CRITICAL] Mattermost Server password reset email requests can be sent to attacker-provided email addresses
Mattermost Server password reset email requests can be sent to attacker-provided email addresses
An issue was discovered in Mattermost Server before 4.0.0, 3.10.1, and 3.9.1. A password reset request was sometimes sent to an attacker-provided e-mail address.
GHSA
Mattermost Server password reset email requests can be sent to attacker-provided email addresses
ghsa·2022-05-24
CVE-2017-18908 [CRITICAL] CWE-287 Mattermost Server password reset email requests can be sent to attacker-provided email addresses
Mattermost Server password reset email requests can be sent to attacker-provided email addresses
An issue was discovered in Mattermost Server before 4.0.0, 3.10.1, and 3.9.1. A password reset request was sometimes sent to an attacker-provided e-mail address.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-06-19
Published