Mattermost Server up to 5.7.x Domain Request default permission

EntryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Mattermost Server up to 5.7.x. It has been declared as critical. This vulnerability affects some unknown functionality of the component Domain Handler. Upgrading to version 5.8.0 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10561181	10/25/2020	VulD...	confirm_url	https://mattermost.com/security-updates/	cve.mitre.org	10/25/2020	accepted	70
10187276	06/20/2020	VulD...	cve_nvd_summary	An issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain requirement when processing a join request for an open team.	mitre.org	06/20/2020	accepted	100
10187275	06/20/2020	VulD...	cve_assigned	1592524800	mitre.org	06/20/2020	accepted	100
10187268	06/20/2020	VulD...	cvss3_nvd_a	N	nist.gov	06/20/2020	accepted	100
10187267	06/20/2020	VulD...	cvss3_nvd_i	L	nist.gov	06/20/2020	accepted	100
10187266	06/20/2020	VulD...	cvss3_nvd_c	N	nist.gov	06/20/2020	accepted	100
10187265	06/20/2020	VulD...	cvss3_nvd_s	U	nist.gov	06/20/2020	accepted	100
10187264	06/20/2020	VulD...	cvss3_nvd_ui	N	nist.gov	06/20/2020	accepted	100
10187263	06/20/2020	VulD...	cvss3_nvd_pr	N	nist.gov	06/20/2020	accepted	100
10187262	06/20/2020	VulD...	cvss3_nvd_ac	L	nist.gov	06/20/2020	accepted	100
10187261	06/20/2020	VulD...	cvss3_nvd_av	N	nist.gov	06/20/2020	accepted	100
10187248	06/20/2020	VulD...	cvss2_nvd_ai	N	nist.gov	06/20/2020	accepted	100
10187247	06/20/2020	VulD...	cvss2_nvd_ii	P	nist.gov	06/20/2020	accepted	100
10187246	06/20/2020	VulD...	cvss2_nvd_ci	N	nist.gov	06/20/2020	accepted	100
10187245	06/20/2020	VulD...	cvss2_nvd_au	N	nist.gov	06/20/2020	accepted	100
10187244	06/20/2020	VulD...	cvss2_nvd_ac	L	nist.gov	06/20/2020	accepted	100
10187243	06/20/2020	VulD...	cvss2_nvd_av	N	nist.gov	06/20/2020	accepted	100
10187233	06/20/2020	VulD...	cwe	276 (privilege escalation)		06/20/2020	accepted	100
10187285	06/20/2020	VulD...	cvss3_nvd_basescore	5.3	nist.gov	06/20/2020	accepted	90
10187284	06/20/2020	VulD...	cvss3_vuldb_rc	X		06/20/2020	accepted	90