CVE-2016-11072

An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled.

View Full Alert

Related Posts

  • CVE-2016-1000229

    swagger-ui has XSS in key names View Full Alert

  • CVE-2016-1000022

    negotiator before 0.6.1 is vulnerable to a regular expression DoS View Full Alert

  • CVE-2016-10937

    IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate. View Full Alert