mattermost
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 663 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 19, 2020 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Mattermost Server fails to restrict Slack import account binding, allowing team admins to forge posts as existing users
Mattermost local image proxy allows server memory exhaustion via unbounded image response buffering
Private team metadata disclosure via the team search API
Mattermost invitation tokens not bound to invited email address allowing unauthorized team and private channel access
Mattermost fails to reject OAuth application sessions in account type switch, allowing account takeover via bearer token
Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined status
Mattermost SAML RelayState forgery allows unauthorized team membership
Mattermost logs plaintext authentication tokens in debug-level server logs on failed auth attempts
Mattermost leaks interactive-message integration secrets to non-admin users via post-deletion events and thread reads
Private channel ID disclosure via user status endpoints
Monitor mattermost in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.