Skip to main content

Uncaught Exception

CVE-2017-18871

High
7.5/10

Summary

An issue was discovered in Mattermost Server versions prior to 4.2.2, 4.3.x prior to 4.3.4, 4.4.x prior to 4.4.5, and 4.5.x prior to 4.5.0. It allows attackers to cause a Denial-of-Service (DoS) (application crash) via an "@" character before a JavaScript field name.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-248 - Uncaught Exception

An exception is thrown from a function, but it is not caught.

References

Advisory Timeline

  • Published