CVE-2019-20860 — Server vulnerability

3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.2%

top 52.56%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mattermost Server

Timeline

PublishedJun 19

Latest updateMay 24

Description

An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows remote attackers to cause a denial of service (application hang) via a crafted SVG document.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

▶NVDmattermost/mattermost_server5.12.0 — 5.12.6+3

🔴Vulnerability Details

GHSA

GHSA-2vfg-m6gf-wcr4: An issue was discovered in Mattermost Server before 5↗2022-05-24

▶

CVEList

CVE-2019-20860: An issue was discovered in Mattermost Server before 5↗2020-06-19

▶