VULNERABILITY INTELLIGENCE
CVE-2017-18914
CVSS score5.3 MEDIUM
EPSS probability0.81%
CISA KEVNot currently listed
Published2020-06-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. An external link can occur on an error page even if it is not on an allowlist.
Weakness classification
- CWE-754: Improper Check for Unusual or Exceptional Conditions
Primary references
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory