Vulnerabilities > CVE-2019-20844 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mattermost Server

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
mattermost
CWE-924
NVD
Published: 2020-06-19
Updated: 2024-11-21

Summary

An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel.

Vulnerable Configurations

Part Description Count
Application
Mattermost
351

Common Weakness Enumeration (CWE)

References