Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-2366

Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.8%
CVSS Severity
CVSS v3 Score 5.6
CVSS v2 Score 5.0
Products affected by CVE-2022-2366


Contact Us

Shodan ® - All rights reserved