VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 19, 2020· Updated Jun 17, 2026

CVE-2018-21251

CVE-2018-21251

Description

An issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be bypassed if the channel name were not the same in the params and the body.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Mattermost/Mattermost8 versions
    cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*range: <5.1.1
    • cpe:2.3:a:mattermost:mattermost_server:5.2.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:mattermost:mattermost_server:5.2.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:mattermost:mattermost_server:5.2.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:mattermost:mattermost_server:5.2.0:rc4:*:*:*:*:*:*
    • cpe:2.3:a:mattermost:mattermost_server:5.2.0:rc5:*:*:*:*:*:*
    • cpe:2.3:a:mattermost:mattermost_server:5.2.0:rc6:*:*:*:*:*:*
    • (no CPE)range: <5.2, <5.1.1
  • Mattermost/Serverdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.