CVE-2017-18902
Moderate
Mattermost Server exposes team invite IDs through API endpoints in github.com/mattermost/mattermost-server
Mattermost Server exposes team invite IDs through API endpoints in github.com/mattermost/mattermost-server
Exploit probability
0.9%
Published
December 8, 2025
Required by
Not available
Last source change
March 3, 2026
02 / AFFECTED SOFTWARE
Affected packages
8 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2017-18902
View original source
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints.
Open Source Vulnerabilities
GO-2025-4185
View original source
Mattermost Server exposes team invite IDs through API endpoints in github.com/mattermost/mattermost-server
Open Source Vulnerabilities
GHSA-jwfv-5hwq-f97r
View original source
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints.
05 / REFERENCES