CVE-2020-14458

published 2020-06-19

CVE-2020-14458: An issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private channels via the "get channel by name" API, aka MMSA-2020-0004.

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

An issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private channels via the "get channel by name" API, aka MMSA-2020-0004.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost_server	< 5.19.0	5.19.0

CWE-200