Mattermost Server up to 5.7.x Attachment permission assignment

entryeditHistoryDiffjsonxmlCTI

A vulnerability classified as critical has been found in Mattermost Server up to 5.7.x. Affected is an unknown code of the component Attachment Handler. Upgrading to version 5.8.0 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10561183	10/25/2020	VulD...	confirm_url	https://mattermost.com/security-updates/	cve.mitre.org	10/25/2020	accepted	70
10187388	06/20/2020	VulD...	cve_nvd_summary	An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post.	mitre.org	06/20/2020	accepted	100
10187387	06/20/2020	VulD...	cve_assigned	1592524800	mitre.org	06/20/2020	accepted	100
10187380	06/20/2020	VulD...	cvss3_nvd_a	N	nist.gov	06/20/2020	accepted	100
10187379	06/20/2020	VulD...	cvss3_nvd_i	L	nist.gov	06/20/2020	accepted	100
10187378	06/20/2020	VulD...	cvss3_nvd_c	N	nist.gov	06/20/2020	accepted	100
10187377	06/20/2020	VulD...	cvss3_nvd_s	U	nist.gov	06/20/2020	accepted	100
10187376	06/20/2020	VulD...	cvss3_nvd_ui	N	nist.gov	06/20/2020	accepted	100
10187375	06/20/2020	VulD...	cvss3_nvd_pr	N	nist.gov	06/20/2020	accepted	100
10187374	06/20/2020	VulD...	cvss3_nvd_ac	L	nist.gov	06/20/2020	accepted	100
10187373	06/20/2020	VulD...	cvss3_nvd_av	N	nist.gov	06/20/2020	accepted	100
10187360	06/20/2020	VulD...	cvss2_nvd_ai	N	nist.gov	06/20/2020	accepted	100
10187359	06/20/2020	VulD...	cvss2_nvd_ii	P	nist.gov	06/20/2020	accepted	100
10187358	06/20/2020	VulD...	cvss2_nvd_ci	N	nist.gov	06/20/2020	accepted	100
10187357	06/20/2020	VulD...	cvss2_nvd_au	N	nist.gov	06/20/2020	accepted	100
10187356	06/20/2020	VulD...	cvss2_nvd_ac	L	nist.gov	06/20/2020	accepted	100
10187355	06/20/2020	VulD...	cvss2_nvd_av	N	nist.gov	06/20/2020	accepted	100
10187345	06/20/2020	VulD...	cwe	732 (privilege escalation)		06/20/2020	accepted	100
10187397	06/20/2020	VulD...	cvss3_nvd_basescore	5.3	nist.gov	06/20/2020	accepted	90
10187396	06/20/2020	VulD...	cvss3_vuldb_rc	X		06/20/2020	accepted	90