CVE-2019-20855

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-20855
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20855.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-20855
Published
2020-06-19T15:15:10.430Z
Modified
2026-02-13T01:42:50.413017Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows attackers to obtain sensitive information (local files) during legacy attachment migration.

References

Affected packages

Git / github.com/mattermost/mattermost

Affected ranges

Type
GIT
Repo
https://github.com/mattermost/mattermost
Events
Introduced
3f905844dfda14efa5f4a597b97195d411b814ef
Fixed
e13dad9fd4b6b8b1893f0351f0012506461f1044
Introduced
6597fdb40134965e26f715854dc85f5e6cfaa6df
Fixed
b000d2fbfb2ae8104c890c921c4a518c553b4803
Introduced
f4f7fd0829d74fcd5e290fd1ba76845af18e553e
Fixed
32f365efeed3be1847de1da8e96e1c673400354e

Affected versions

v5.*
v5.14.0
v5.14.0-rc5
v5.14.1
v5.14.1-rc1
v5.14.2
v5.14.2-rc1
v5.14.3
v5.14.3-rc1
v5.14.4
v5.14.4-rc1
v5.15.0
v5.15.0-rc1
v5.15.0-rc2
v5.15.0-rc3
v5.15.0-rc4
v5.15.1
v5.15.1-rc1
v5.16.0
v5.16.0-rc3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20855.json"

Git / github.com/mattermost/mattermost-server

Affected ranges

Type
GIT
Repo
https://github.com/mattermost/mattermost-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
243500a4c032b5954fb41f2abe41cf4be34176fa
Introduced
684cbb602f56c584445c22361e3c923ce63807e8
Fixed
32f365efeed3be1847de1da8e96e1c673400354e
Introduced
68b0b52fc86534e161e62eda78c5820ef799bc70
Fixed
b000d2fbfb2ae8104c890c921c4a518c553b4803
Introduced
daf64218a6e6b4047c7701a2a5596958771d4132
Fixed
e13dad9fd4b6b8b1893f0351f0012506461f1044

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20855.json"