mattermost
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 626 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 19, 2020 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Plaintext pre-auth secret exposure via Desktop App diagnostics report
Mattermost thread memberships persist after team removal, exposing private channel thread metadata on re-invite
Mattermost Boards plugin didn’t enforce role-based authorization on board channel link allowing board editors to expose boards to arbitrary channels
Insufficient server-side validation of board member role fields permits privilege escalation
Boards plugin panics on WebSocket command with non-string field types
Boards plugin retains Board Admin rights for users demoted to System Guest
Missing per-channel team-scope check in ABAC access control policy unassign allows cross-team policy removal
Insufficient validation of guest board admin privileges on archive import
Delegated OAuth tokens could revoke unrelated OAuth application authorizations
Board channel linking without read channel permission validation
Monitor mattermost in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.