CVE-2019-20863

Medium

5/10

Summary

An issue was discovered in Mattermost Server before 5.13.0. Incoming webhook creation is not properly restricted.

Access Complexity: LOW
AccessVector: NETWORK
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: NONE
Availability Impact: NONE

References

Advisory Timeline

Published Jun 19, 2020