Description
Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mattermost Mattermost
Default version status: unaffected
9.11.0 to ≤ 9.11.2affected9.5.0 to ≤ 9.5.10affected10.1.0unaffected9.11.3unaffected9.5.11unaffected