Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-37862

Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into signing up using attacker-controlled email addresses via crafted invitation token.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.6%
CVSS Severity
CVSS v3 Score 3.7
CVSS v2 Score 5.8
Products affected by CVE-2021-37862


Contact Us

Shodan ® - All rights reserved