CVE-2022-2366

MEDIUM · CVSS 5.6 EPSS 0.60%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-07-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-2366

Severity

MEDIUM

CVSS

5.6

EPSS

0.60%

Original NVD Description

Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.