mattermost
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 671 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 19, 2020 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post
Team admin can escalate a team member's permissions via the team member roles endpoint
Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System Administrator
Unbounded memory consumption during PDF text extraction
Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket frames
Improper post type validation on scheduled post endpoints
Insufficient length validation when parsing Zoom chat transcriptions
Null condition in Playbooks import crashes the plugin
Mattermost Server fails to restrict Slack import account binding, allowing team admins to forge posts as existing users
Mattermost local image proxy allows server memory exhaustion via unbounded image response buffering
Monitor mattermost in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.