Filters

Mattermost MattermostIncorrect Session Creation with Desktop SSO

3.5
First published (updated )

go/github.com/mattermost/mattermost/server/v8Unauthorized disabling of invite URL

2.7
First published (updated )

Mattermost MattermostRemoteClusterFrame payloads are audit logged in full

2.7
First published (updated )

npm/mattermost-desktopBypass of TCC restrictions on macOS

3.8
First published (updated )

Mattermost Mattermost ServerCSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin)

3.5
EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Mattermost Mattermost DesktopLack Of Secure Keyboard Entry Protection in MacOS Desktop

3.3
EPSS
0.04%
First published (updated )

go/github.com/mattermost/mattermost/server/v8A User Manager role with user edit permissions could manage/update bots

3.8
First published (updated )

Mattermost Mattermost ServerGuest accounts invited and added to channels by Welcomebot plugin

3.5
First published (updated )

Mattermost Mattermost ServerInconsistent state in UI after boards permission change by system admin

2.7
First published (updated )

Mattermost Mattermost ServerMember can create team with team override scheme

3.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Mattermost Mattermost ServerDisclosure of team owner email address when when accessing the teams API

2.7
First published (updated )

Mattermost Mattermost ServerDisclosure of team owner email address when regenerating Invite ID

2.7
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203