Filters
Mattermost MattermostAudit logging fails to sanitize post metadata
7.5
First published (updated )
Mattermost MattermostIncorrect authorization allows a user manager to update a system admin
6.7
First published (updated )
Mattermost MattermostA guest user can perform various actions on public playbooks
6.5
First published (updated )
Mattermost MattermostAttachment of deleted message in a thread remains accessible and downloadable
4.3
First published (updated )
Mattermost MattermostSpecially crafted search query can cause large log entries in postgres
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost MattermostDenial of Service while unescaping a Markdown string
6.5
First published (updated )
Mattermost MattermostStack exhaustion in PreparePostForClientWithEmbedsAndImages
6.5
First published (updated )
Mattermost MattermostEphemeral messages return private channel contents in permalink previews
6.5
First published (updated )
Mattermost MattermostPlaybooks lets you edit arbitrary posts
4.3
First published (updated )
Mattermost MattermostDeactivated user can retain access using oauth2 api
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost MattermostCollapsed Reply Threads APIs leak message contents from private channels
6.5
First published (updated )
Mattermost MattermostChannel commands execution doesn't properly verify permissions
4.3
First published (updated )
Mattermost MattermostApps Framework allows install requests from regular members via an internal path
6.5
First published (updated )
Mattermost MattermostApp Framework does not checks for the secret provided in the incoming webhook request
4.3
First published (updated )
Mattermost MattermostLack of URL normalization allows rendering previews for disallowed domains
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mattermost MattermostDB username/password revealed in application logs
7.5
First published (updated )