Approved changes feed: RSS · Atom

cpe:2.3:a:mattermost:mattermost_server:4.5.0:rc4:*:*:*:*:*:*

part: a version: 4.5.0 update: rc4

VendorMattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc)
ProductMattermost Server (657bc445-594e-5ca1-a676-4f18538f1c02)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mattermost/mattermost-server purl2cpe 2026-06-01 10:18:19.892256

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-18871 vulnerable 2026-06-03 14:36:58.362670 Details available
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service (application crash) via an @ character before a JavaScript field name.
Published: 2020-06-19T16:51:40.000Z
Updated: 2024-08-05T21:37:44.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18870 vulnerable 2026-06-03 14:36:58.362159 Details available
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case.
Published: 2020-06-19T16:47:11.000Z
Updated: 2024-08-05T21:37:44.354Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.