Filter
-Infinity
0
Trending
go/github.com/mattermost/mattermost/server/v8Unauthorized Playbooks Post Deletion in Mattermost Playbooks Plugin
3.1
EPSS
0.02%
First published (updated )
go/github.com/mattermost/mattermost/server/v8DoS in Mattermost Playbooks via Excessive Task Actions
6.5
EPSS
0.04%
First published (updated )
go/github.com/mattermost/mattermost/server/v8Webapp DoS via malicious retrospective post in Playbooks
6.5
EPSS
0.04%
First published (updated )
go/github.com/mattermost/mattermost/server/v8Unauthorized View Access to Archived Channel Member Info
4.3
First published (updated )
MattermostWebhook Secret Exposure via Timing attack in MSteams plugin
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/github.com/mattermost/mattermost/server/v8Data exfiltration via AI plugin Jira tool
3
First published (updated )
go/github.com/mattermost/mattermost/server/v8Channel metadata visible in archived channels despite configuration setting
4.3
First published (updated )
go/github.com/mattermost/mattermost/server/v8MFA Enforcement Bypass Allows Unauthorized Removal of MFA for Other Users
2.2
First published (updated )
go/github.com/mattermost/mattermost/server/v8Unauthorized AI bot activation via Wrangler plugin
3.1
First published (updated )
go/github.com/mattermost/mattermost/server/v8Unauthorized Bot Login Using Credentials
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/github.com/mattermost/mattermost/server/v8Leaked Metadata of Deleted Files via Bookmark Creation
3.1
First published (updated )
go/github.com/mattermost/mattermost/server/v8Syatem admin profile modification by delegated granular administration role
4.7
EPSS
0.03%
First published (updated )
Mattermost Mobile AppsUnauthorized Notification Exposure in Mobile App Under Specific Conditions
2
First published (updated )
go/github.com/mattermost/mattermost/server/v8Unauthorized Access to User Activity Logs API by delegated granular administration roles
2.7
First published (updated )
Mattermost Mobile AppsDenial of Service Via Malicious GIF
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MattermostBypassing MFA Enforcement on Plugin Endpoints
8.8
First published (updated )
MattermostUnauthorized Bookmark Creation and Modification in Archived Channels
4.3
First published (updated )
MattermostMFA Enforcement Bypass in Search APIs
6.5
EPSS
0.03%
First published (updated )
MattermostUnauthorized Command Execution in Archived Channels
8.8
First published (updated )
MattermostUnauthorized Private-to-Public Channel Conversion
5.4
EPSS
0.03%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MattermostAuto-Enrollment of Team Admins into Private Channels without explicit consent
3.3
EPSS
0.03%
First published (updated )
MattermostUnauthorized View Access to Site Statistics and Team Statistics
4.3
First published (updated )
npm/mattermost-desktopmacOS TCC Bypass via Code Injection
10
First published (updated )
MattermostSQL Injection in Mattermost Boards via board category ID reordering
9.6
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MattermostMobile crash via object that can't be cast to String in Attachment Field
6.5
EPSS
0.04%
First published (updated )
MattermostMobile crash via improper validation of proto style in attachments
6.5
EPSS
0.04%
First published (updated )
MattermostMobile crash via file with specially crafted filename
4.3
EPSS
0.04%
First published (updated )
Mattermost Mobile AppsInsufficient Input Validation on Post Props
6.5
EPSS
0.04%
First published (updated )
MattermostInsufficient Input Validation on Post Props
6.5
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.