CVE-2017-18918: Mattermost Server

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname.

Affected products

• Mattermost Mattermost Server: from 3.6.0, before 3.6.5 (fixed in 3.6.5); from 3.7.0, before 3.7.3 (fixed in 3.7.3)

Published 2020-06-19. Last modified 2026-06-17.