CVE-2019-20841

published 2020-06-19

CVE-2019-20841: An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account…

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost_server	< 5.9.7	5.9.7
mattermost	mattermost_server	—	—
mattermost	mattermost_server	>= 5.15.0 < 5.15.4	5.15.4
mattermost	mattermost_server	>= 5.16.0 < 5.16.4	5.16.4
mattermost	mattermost_server	>= 5.17.0 < 5.17.2	5.17.2

CWE-352