Filter
AND
Software
Mattermost Mattermost ServerMattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.…
8.8
First published (updated )
Mattermost Mattermost BoardsSession is not invalidated on server-side when user logged out of Boards
7.5
First published (updated )
Mattermost Mattermost ServerStack overflow in SAML login in Mattermost
7.5
First published (updated )
Mattermost Mattermost ServerAuthorized users are allowed to install old plugin versions from the Marketplace
8.8
First published (updated )
Mattermost PlaybooksPlaybook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost MattermostIDOR: Updating a playbook via the Playbooks API
7.1
First published (updated )
Mattermost Mattermost ServerStored XSS via SVG attachment on Boards
7.3
First published (updated )
Mattermost Mattermost ServerUser password logged in audit logs
7.5
First published (updated )
Mattermost Mattermost ServerPrivilege escalation to system admin via personal access tokens
8.8
First published (updated )
Mattermost MattermostDB username/password revealed in application logs
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost MattermostDenial of Service via Board Import Zip Bomb
7.5
First published (updated )
Mattermost Mattermost ServerPlaybook Plugin Crash via Run Checklist
7.5
First published (updated )
Mattermost Mattermost ServerDenial of Service via Opengraph Data Cache
7.5
First published (updated )
Mattermost Mattermost ServerParameter tampering in the registration resulting in blocked accounts to be created
8.2
EPSS
0.05%
First published (updated )
Mattermost MattermostAudit logging fails to sanitize post metadata
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/github.com/mattermost/mattermost/server/v8Malicious remote can create/update/delete arbitrary posts in arbitrary channels
7.1
First published (updated )
go/github.com/mattermost/mattermost/server/v8Existing local user overwritten by malicious remote
7.4
First published (updated )
go/github.com/mattermost/mattermost/server/v8Malicious remote can add users to arbitrary teams and channels
8.7
First published (updated )
Mattermost MattermostLack of server certificate validation in websockets connection
8.1
First published (updated )
Mattermost Mattermost ServerWebSockets accept connections from HTTPS origin
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost Mattermost ServerDeleted attachments in Boards remain accessible
7.5
First published (updated )
Mattermost Mattermost ServerLack of previous password reset tokens on new token creation
8.2
First published (updated )
npm/mattermost-desktopRCE in desktop app in Windows by local attacker
7.8
First published (updated )
Mattermost MattermostOne-click Client-Side Path Traversal Leading to CSRF in User Management admin page
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost MattermostSystem Role with edit access to permissions can elevate themselves to system admin
7.2
EPSS
0.05%
First published (updated )
go/github.com/mattermost/mattermost/server/v8Permanently local data deletion by malicious remote
8.7
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of …
7.5
First published (updated )
Mattermost Mattermost ServerAn issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at pas…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.