Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mattermost mattermost vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-2791
When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated malicious user to edit an arbitrary channel post.
Mattermost Mattermost
Mattermost Mattermost 7.10.0
NA
CVE-2023-2792
Mattermost fails to sanitize ephemeral error messages, allowing an malicious user to obtain arbitrary message contents by a specially crafted /groupmsg command.
Mattermost Mattermost
Mattermost Mattermost 7.10.0
NA
CVE-2023-2793
Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an malicious user to cause a denial-of-service by a linking to a specially crafted webpage in a message.
Mattermost Mattermost 7.10.0
Mattermost Mattermost
NA
CVE-2023-2797
Mattermost fails to sanitize code permalinks, allowing an malicious user to preview code from private repositories by posting a specially crafted permalink on a channel.
Mattermost Mattermost
Mattermost Mattermost 7.10.0
NA
CVE-2023-48369
Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow the log.
Mattermost Mattermost
Mattermost Mattermost 9.1.0
NA
CVE-2023-2831
Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an malicious user to cause a Denial of Service by sending a message containing a large number of escaped characters.
Mattermost Mattermost
Mattermost Mattermost 7.10.0
383
VMScore
CVE-2019-20844
An issue exists in Mattermost Server prior to 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel.
Mattermost Mattermost Server
Mattermost Mattermost Server 5.18.0
445
VMScore
CVE-2019-20868
An issue exists in Mattermost Server prior to 5.11.0. Invite IDs were improperly generated.
Mattermost Mattermost Server
Mattermost Mattermost Server 5.9.0
445
VMScore
CVE-2019-20869
An issue exists in Mattermost Server prior to 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel.
Mattermost Mattermost Server
Mattermost Mattermost Server 5.10.0
187
VMScore
CVE-2019-20872
An issue exists in Mattermost Server prior to 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can attack local services.
Mattermost Mattermost Server
Mattermost Mattermost Server 5.9.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »