VYPR
← All advisories
Medium severity5.6NVD Advisory· Published Jul 12, 2022· Updated Jun 17, 2026

CVE-2022-2366

CVE-2022-2366

Description

Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Mattermost/Mattermostllm-fuzzy4 versions
    <=6.7.0+ 3 more
    • (no CPE)range: <=6.7.0
    • (no CPE)range: 6.7.x 6.7.0
    • cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*range: <6.3.9
    • cpe:2.3:a:mattermost:mattermost_server:6.7.0:*:*:*:*:*:*:*
  • osv-coords
    pkg:bitnami/mattermost
    Range: < 6.3.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.