Filter
AND
go/github.com/mattermost/mattermost/server/v8Excessive resource consumption when sending long emoji names in user custom status
6.5
EPSS
0.04%
First published (updated )
MattermostTeam associated AD/LDAP Groups Leaked due to missing authorization
6.5
EPSS
0.04%
First published (updated )
go/github.com/mattermost/mattermost/server/v8Denial of service in mattermost mobile apps and server via emoji reactions
4.3
First published (updated )
MattermostDetails of archived public channels are leaked to members of another team
4.3
First published (updated )
MattermostReflected client side path traversal leading to CSRF in Playbooks
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MattermostPlaybook plugin crash via missing interface type assertion
7.5
First published (updated )
MattermostTodo plugin gets crashed and disabled by member
6.5
First published (updated )
MattermostInaccessible Post Information Leak via Run Timeline IDOR
6.5
First published (updated )
MattermostIDOR when updating the tasks of a private playbook run
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MattermostClient side path traversal due to lack of route parameters validation
9.8
EPSS
0.09%
First published (updated )
MattermostOpen redirect in /oauth/<service>/mobile_login?redirect_to=
6.1
First published (updated )
MattermostPermalink previews displayed for posts in archived channels even if users are disallowed to view archived channels
4.3
First published (updated )
MattermostLog Flooding due to specially crafted requests in different endpoints
5.3
First published (updated )
MattermostDenial of Service via specially crafted block fields in Mattermost Boards
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MattermostDenial of Service via Board Import Zip Bomb
7.5
First published (updated )
MattermostDenial of Service via Link Preview in /api/v4/redirect_location
5.3
EPSS
0.05%
First published (updated )
MattermostPassword hash in response body after username update
4.9
EPSS
0.05%
First published (updated )