CVE-2020-14457

published 2020-06-19

CVE-2020-14457: An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the update_team WebSocket event, aka…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the update_team WebSocket event, aka MMSA-2020-0012.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
github.com	mattermost_mattermost-server_v5	>= 0 < 5.20.0	5.20.0
mattermost	mattermost_server	< 5.20.0	5.20.0

CWE-862