CVE-2018-21263

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 4.7.0 Mattermost Server version 4.6.2 and earlier Mattermost Server version 4.5.2 and earlier

Description An issue allows an attacker to authenticate to a different user's account via a crafted SAML response.

Recommendations For versions prior to 4.7.0, update to version 4.7.0 or later. For version 4.6.2 and earlier, update to version 4.6.2 or later, then further update to version 4.7.0 or later. For version 4.5.2 and earlier, update to version 4.5.2 or later, then further update to version 4.7.0 or later.