Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-14457 BIT-mattermost-2020-14457EUVD-2022-4257GHSA-j2h2-cvwh-cr64GO-2023-1939

Mattermost Server Sensitive Data Exposure

Published Jun 19, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: github.com/mattermost/mattermost Package: github.com/mattermost/mattermost-server Package: github.com/mattermost/mattermost-server/v5 Ecosystem: Go

Description

An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the update_team WebSocket event, aka MMSA-2020-0012.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/mattermost/mattermost all versions — GO-2023-1939
Go github.com/mattermost/mattermost-server all versions — GO-2023-1939
Go github.com/mattermost/mattermost-server/v5 < 5.20.0 5.20.0 GHSA-j2h2-cvwh-cr64

References