CVE-2017-18900

Description

Mattermost Server is vulnerable CSV Injection in github.com/mattermost/mattermost-server

Affected packages (2)

• Go/github.com/mattermost/mattermost-serverfrom 0, < 3.10.3
• Go/github.com/mattermost/mattermost-serverfrom 0, < 3.10.3+incompatible, >= 4.0.0+incompatible, < 4.0.3+incompatible

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-8q4v-35v6-g8wr
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2017-18900
• PATCHhttps://github.com/mattermost/mattermost
• WEBhttps://github.com/mattermost/mattermost/commit/eaa598aba901a20c65c52dd1e1b82e7e1dffb962
• WEBhttps://mattermost.com/security-updates