4.7
Moyenne
CVE-2021-37866 Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out…
Description
Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Mattermost Boards 0.10 | premières → 0.10.0 | Pas de correctif indiqué |
| Mattermost Boards 0.9 | premières → < 0.9.5 | 0.9.5 |
| Mattermost Boards 0.8 | premières → < 0.8.4 | 0.8.4 |
| Mattermost Boards 0.7 | premières → < 0.7.5 | 0.7.5 |