Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Session is not invalidated on server-side when user logged out of Boards
Vulnerability Description
Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
不充分的会话过期机制
Vulnerability Title
Mattermost 代码问题漏洞
Vulnerability Description
Mattermost是美国Mattermost公司的一个开源协作平台。 Mattermost Boards 插件 v0.10.0 及更早版本存在安全漏洞，该漏洞允许攻击者重用旧会话令牌进行授权。
CVSS Information
N/A
Vulnerability Type
N/A