- Description
- Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows a System Administrator to make the server issue requests to internal network addresses and read the responses via the configured OAuth token and userinfo endpoints.. Mattermost Advisory ID: MMSA-2026-00776
- Source
- responsibledisclosure@mattermost.com
- NVD status
- Analyzed
- Products
- mattermost_server
CVSS 3.1
- Type
- Secondary
- Base score
- 5.5
- Impact score
- 2.7
- Exploitability score
- 2.3
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
- responsibledisclosure@mattermost.com
- CWE-918
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C7DFF726-7FA7-48F9-90CE-3F6DAF6FA1C0",
"versionEndExcluding": "11.7.11",
"versionStartIncluding": "11.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "864932C7-FD92-48AC-8789-DF73D5CA9AAF",
"versionEndExcluding": "11.8.6",
"versionStartIncluding": "11.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2F937268-2154-4B45-B9E0-8B3451070CD0",
"versionEndExcluding": "11.9.2",
"versionStartIncluding": "11.9.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "02B602D7-09A8-4AD1-A4A2-C70050E007AB",
"versionEndExcluding": "11.10.2",
"versionStartIncluding": "11.10.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]