Unrated
An issue was discovered in Mattermost Server before 5.18.0. An attacker can send a user_typing WebSocket event to any channel.
CVE-2019-20847
First seen on SecPulse
References
- advisory mattermost.com