Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mattermost mattermost 6.7.0 vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2022-2406
The legacy Slack import feature in Mattermost version 6.7.0 and previous versions fails to properly limit the sizes of imported files, which allows an authenticated malicious user to crash the server by importing large files via the Slack import REST API.
Mattermost Mattermost
Mattermost Mattermost 6.6.1
Mattermost Mattermost 6.6.0
Mattermost Mattermost 6.7.0
4.3
CVSSv3
CVE-2022-2408
The Guest account feature in Mattermost version 6.7.0 and previous versions fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels.
Mattermost Mattermost
Mattermost Mattermost 6.6.1
Mattermost Mattermost 6.6.0
Mattermost Mattermost 6.7.0
5.3
CVSSv3
CVE-2022-2366
Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and previous versions allows malicious user to bypass some of the rate limitations in place or use manipulated IPs for audit logging via manipulating the request headers.
Mattermost Mattermost Server 6.7.0
Mattermost Mattermost Server
6.5
CVSSv3
CVE-2022-2401
Unrestricted information disclosure of all users in Mattermost version 6.7.0 and previous versions allows team members to access some sensitive information by directly accessing the APIs.
Mattermost Mattermost Server 6.6.0
Mattermost Mattermost Server 6.7.0
Mattermost Mattermost Server
Mattermost Mattermost Server 6.6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started