Related Posts

• CVE-2016-11066

  An issue was discovered in Mattermost Server before 3.2.0. The initial_load API disclosed unnecessary personal information. View Full Alert

• CVE-2016-11084 (mattermost_server)

  An issue was discovered in Mattermost Server before 2.1.0. It allows XSS via CSRF. View Full Alert

• CVE-2016-11076 (mattermost_server)

  An issue was discovered in Mattermost Server before 3.0.0. It does not ensure that a cookie is used over SSL. View Full Alert