CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-37860

Mattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to inject arbitrary web script in product deployments that explicitly disable the default CSP.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 57.0%

CVSS Severity

CVSS v3 Score 3.7

CVSS v2 Score 2.6

References

Products affected by CVE-2021-37860

Mattermost » Mattermost » Version: N/A

cpe:2.3:a:mattermost:mattermost:-
Mattermost » Mattermost » Version: 1.21.0

cpe:2.3:a:mattermost:mattermost:1.21.0
Mattermost » Mattermost » Version: 1.21.1

cpe:2.3:a:mattermost:mattermost:1.21.1
Mattermost » Mattermost » Version: 1.21.2

cpe:2.3:a:mattermost:mattermost:1.21.2
Mattermost » Mattermost » Version: 1.22.0

cpe:2.3:a:mattermost:mattermost:1.22.0
Mattermost » Mattermost » Version: 1.22.1

cpe:2.3:a:mattermost:mattermost:1.22.1
Mattermost » Mattermost » Version: 1.23.0

cpe:2.3:a:mattermost:mattermost:1.23.0
Mattermost » Mattermost » Version: 1.23.1

cpe:2.3:a:mattermost:mattermost:1.23.1
Mattermost » Mattermost » Version: 1.24.0

cpe:2.3:a:mattermost:mattermost:1.24.0
Mattermost » Mattermost » Version: 1.25.0

cpe:2.3:a:mattermost:mattermost:1.25.0
Mattermost » Mattermost » Version: 1.25.1

cpe:2.3:a:mattermost:mattermost:1.25.1
Mattermost » Mattermost » Version: 1.26.0

cpe:2.3:a:mattermost:mattermost:1.26.0
Mattermost » Mattermost » Version: 1.26.1

cpe:2.3:a:mattermost:mattermost:1.26.1
Mattermost » Mattermost » Version: 1.26.2

cpe:2.3:a:mattermost:mattermost:1.26.2
Mattermost » Mattermost » Version: 1.27.0

cpe:2.3:a:mattermost:mattermost:1.27.0
Mattermost » Mattermost » Version: 1.27.1

cpe:2.3:a:mattermost:mattermost:1.27.1
Mattermost » Mattermost » Version: 1.28.0

cpe:2.3:a:mattermost:mattermost:1.28.0
Mattermost » Mattermost » Version: 1.29.0

cpe:2.3:a:mattermost:mattermost:1.29.0
Mattermost » Mattermost » Version: 1.30.0

cpe:2.3:a:mattermost:mattermost:1.30.0
Mattermost » Mattermost » Version: 1.30.1

cpe:2.3:a:mattermost:mattermost:1.30.1
Mattermost » Mattermost » Version: 1.31.0

cpe:2.3:a:mattermost:mattermost:1.31.0
Mattermost » Mattermost » Version: 1.31.1

cpe:2.3:a:mattermost:mattermost:1.31.1
Mattermost » Mattermost » Version: 1.31.2

cpe:2.3:a:mattermost:mattermost:1.31.2
Mattermost » Mattermost » Version: 1.32.0

cpe:2.3:a:mattermost:mattermost:1.32.0
Mattermost » Mattermost » Version: 1.32.1

cpe:2.3:a:mattermost:mattermost:1.32.1
Mattermost » Mattermost » Version: 1.32.2

cpe:2.3:a:mattermost:mattermost:1.32.2
Mattermost » Mattermost » Version: 1.33.0

cpe:2.3:a:mattermost:mattermost:1.33.0
Mattermost » Mattermost » Version: 1.33.1

cpe:2.3:a:mattermost:mattermost:1.33.1
Mattermost » Mattermost » Version: 1.34.0

cpe:2.3:a:mattermost:mattermost:1.34.0
Mattermost » Mattermost » Version: 1.34.1

cpe:2.3:a:mattermost:mattermost:1.34.1
Mattermost » Mattermost » Version: 1.35.0

cpe:2.3:a:mattermost:mattermost:1.35.0
Mattermost » Mattermost » Version: 1.35.1

cpe:2.3:a:mattermost:mattermost:1.35.1
Mattermost » Mattermost » Version: 1.36.0

cpe:2.3:a:mattermost:mattermost:1.36.0
Mattermost » Mattermost » Version: 1.37.0

cpe:2.3:a:mattermost:mattermost:1.37.0
Mattermost » Mattermost » Version: 1.38.0

cpe:2.3:a:mattermost:mattermost:1.38.0
Mattermost » Mattermost » Version: 1.38.1

cpe:2.3:a:mattermost:mattermost:1.38.1
Mattermost » Mattermost » Version: 1.39.0

cpe:2.3:a:mattermost:mattermost:1.39.0
Mattermost » Mattermost » Version: 1.40.0

cpe:2.3:a:mattermost:mattermost:1.40.0
Mattermost » Mattermost » Version: 1.41.0

cpe:2.3:a:mattermost:mattermost:1.41.0
Mattermost » Mattermost » Version: 1.41.1

cpe:2.3:a:mattermost:mattermost:1.41.1
Mattermost » Mattermost » Version: 5.34.0

cpe:2.3:a:mattermost:mattermost:5.34.0
Mattermost » Mattermost » Version: 5.34.1

cpe:2.3:a:mattermost:mattermost:5.34.1
Mattermost » Mattermost » Version: 5.34.2

cpe:2.3:a:mattermost:mattermost:5.34.2
Mattermost » Mattermost » Version: 5.34.3

cpe:2.3:a:mattermost:mattermost:5.34.3
Mattermost » Mattermost » Version: 5.34.4

cpe:2.3:a:mattermost:mattermost:5.34.4
Mattermost » Mattermost » Version: 5.34.5

cpe:2.3:a:mattermost:mattermost:5.34.5
Mattermost » Mattermost » Version: 5.35.0

cpe:2.3:a:mattermost:mattermost:5.35.0
Mattermost » Mattermost » Version: 5.35.1

cpe:2.3:a:mattermost:mattermost:5.35.1
Mattermost » Mattermost » Version: 5.35.2

cpe:2.3:a:mattermost:mattermost:5.35.2
Mattermost » Mattermost » Version: 5.35.3

cpe:2.3:a:mattermost:mattermost:5.35.3
Mattermost » Mattermost » Version: 5.35.4

cpe:2.3:a:mattermost:mattermost:5.35.4
Mattermost » Mattermost » Version: 5.36.0

cpe:2.3:a:mattermost:mattermost:5.36.0
Mattermost » Mattermost » Version: 5.36.1

cpe:2.3:a:mattermost:mattermost:5.36.1
Mattermost » Mattermost » Version: 5.36.2

cpe:2.3:a:mattermost:mattermost:5.36.2
Mattermost » Mattermost » Version: 5.37.0

cpe:2.3:a:mattermost:mattermost:5.37.0
Mattermost » Mattermost » Version: 5.37.1

cpe:2.3:a:mattermost:mattermost:5.37.1
Mattermost » Mattermost » Version: 5.37.10

cpe:2.3:a:mattermost:mattermost:5.37.10
Mattermost » Mattermost » Version: 5.37.2

cpe:2.3:a:mattermost:mattermost:5.37.2
Mattermost » Mattermost » Version: 5.37.3

cpe:2.3:a:mattermost:mattermost:5.37.3
Mattermost » Mattermost » Version: 5.37.4

cpe:2.3:a:mattermost:mattermost:5.37.4
Mattermost » Mattermost » Version: 5.37.5

cpe:2.3:a:mattermost:mattermost:5.37.5
Mattermost » Mattermost » Version: 5.37.6

cpe:2.3:a:mattermost:mattermost:5.37.6
Mattermost » Mattermost » Version: 5.37.7

cpe:2.3:a:mattermost:mattermost:5.37.7
Mattermost » Mattermost » Version: 5.37.8

cpe:2.3:a:mattermost:mattermost:5.37.8
Mattermost » Mattermost » Version: 5.37.9

cpe:2.3:a:mattermost:mattermost:5.37.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-37860

Products

Pricing

Contact Us