Filters
Versions
5.7.0
5
7.9.0
5
8.0.0
5
5.15.0
4
5.16.0
4
5.8.0
4
5.9.0-rc1
4
5.9.0-rc2
4
5.9.0-rc3
4
5.9.0-rc4
4
7.8.0
4
5.17.0
3
5.18.0-rc1
3
5.18.0-rc2
3
5.18.0-rc3
3
5.18.0-rc4
3
7.10.0
3
7.8.14
3
8.1.5
3
9.0.0
3
9.0.3
3
9.1.1
3
9.1.2
3
9.2.0
3
9.2.1
3
3.10.0
2
4.2.0
2
4.3.0-rc1
2
4.3.0-rc2
2
4.3.0-rc3
2
4.3.0-rc4
2
4.6.0
2
4.7.0-rc1
2
4.7.0-rc2
2
4.7.0-rc3
2
4.7.0-rc4
2
5.6.0
2
3.6.0
1
3.7.0
1
3.8.0
1
4.1.0
1
4.2.0-rc1
1
4.2.0-rc2
1
4.2.0-rc3
1
4.2.0-rc4
1
4.3.0
1
4.4.0
1
4.5.0-rc1
1
4.5.0-rc2
1
4.5.0-rc3
1
4.5.0-rc4
1
5.10.0
1
5.11.0
1
5.12.0-rc1
1
5.12.0-rc2
1
5.12.0-rc3
1
5.12.0-rc4
1
5.12.0-rc5
1
5.12.0-rc6
1
5.14.0
1
5.5.0
1
5.7.0-rc1
1
5.7.0-rc2
1
5.7.0-rc3
1
5.7.0-rc4
1
5.7.0-rc5
1
5.7.0-rc6
1
5.8.0-rc1
1
5.8.0-rc2
1
5.8.0-rc3
1
5.8.0-rc4
1
5.9.0
1
6.0.0
1
6.2.0
1
6.3.0
1
7.2.0
1
7.7.1
1
8.1.0
1
9.1.0
1
9.5.0
1
9.7.0
1
9.8.0
1
9.9.0
1
go/github.com/mattermost/mattermost/server/v8Malicious remote can create/update/delete arbitrary posts in arbitrary channels
7.1
First published (updated )
Mattermost Mattermost ServerReflected client side path traversal leading to CSRF in Playbooks
8.8
First published (updated )
Mattermost Mattermost ServerPlaybook plugin crash via missing interface type assertion
7.5
First published (updated )
Mattermost Mattermost ServerPlaybook Plugin Crash via Run Checklist
7.5
First published (updated )
Mattermost Mattermost ServerDenial of Service via Opengraph Data Cache
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerParameter tampering in the registration resulting in blocked accounts to be created
8.2
EPSS
0.05%
First published (updated )
Mattermost Mattermost ServerLack of previous password reset tokens on new token creation
8.2
First published (updated )
Mattermost Mattermost ServerDeleted attachments in Boards remain accessible
7.5
First published (updated )
Mattermost Mattermost ServerWebSockets accept connections from HTTPS origin
8.1
First published (updated )
Mattermost Mattermost ServerPrivilege escalation to system admin via personal access tokens
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerUser password logged in audit logs
7.5
First published (updated )
Mattermost Mattermost ServerStored XSS via SVG attachment on Boards
7.3
First published (updated )
Mattermost Mattermost ServerAuthorized users are allowed to install old plugin versions from the Marketplace
8.8
First published (updated )
Mattermost Mattermost ServerStack overflow in SAML login in Mattermost
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at pas…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. Weak hashing was used f…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when Single Sign-On OA…
8.1
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 3.9.0 when SAML is used. Encryption and signatur…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows a bypass of r…
8.8
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2…
8.1
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to …
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attack…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of superfluous a…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attacke…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes inadvertently…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. An attacker could authe…
8.8
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of se…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt …
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attac…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attac…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown li…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.13.0. Incoming webhook creation is not properl…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.13.0. Non-members may fetch a team's slash com…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.15.0. Login access control can be bypassed via…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial of…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.16.0. It allows attackers to cause a denial of…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows att…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.17.0. It allows remote attackers to cause a de…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of…
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.