Security Advisory
CVE-2017-18920
9.8
CRITICAL
Vulnerability Description
An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy.
Published Date
June 19, 2020
Official Source
NIST NVD Advisory