Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mattermost mattermost vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-2791
When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated malicious user to edit an arbitrary channel post.
Mattermost Mattermost
Mattermost Mattermost 7.10.0
NA
CVE-2023-40703
Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards allowing a malicious user to consume excessive resources, possibly leading to Denial of Service, by patching the field of a block using a specially crafted string.
Mattermost Mattermost
Mattermost Mattermost 9.1.0
NA
CVE-2023-2831
Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an malicious user to cause a Denial of Service by sending a message containing a large number of escaped characters.
Mattermost Mattermost
Mattermost Mattermost 7.10.0
NA
CVE-2023-2793
Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an malicious user to cause a denial-of-service by a linking to a specially crafted webpage in a message.
Mattermost Mattermost 7.10.0
Mattermost Mattermost
NA
CVE-2023-2797
Mattermost fails to sanitize code permalinks, allowing an malicious user to preview code from private repositories by posting a specially crafted permalink on a channel.
Mattermost Mattermost
Mattermost Mattermost 7.10.0
NA
CVE-2023-43754
Mattermost fails to check whether the “Allow users to view archived channels” setting is enabled during permalink previews display, allowing members to view permalink previews of archived channels even if the “Allow users to view archived channels” setting...
Mattermost Mattermost
Mattermost Mattermost 9.1.0
NA
CVE-2023-49607
Mattermost fails to validate the type of the "reminder" body request parameter allowing an malicious user to crash the Playbook Plugin when updating the status dialog.
Mattermost Mattermost Server
Mattermost Mattermost Server 9.1.1
3.5
CVSSv2
CVE-2017-18870
An issue exists in Mattermost Server prior to 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.5.0
5
CVSSv2
CVE-2017-18871
An issue exists in Mattermost Server prior to 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows malicious users to cause a denial of service (application crash) via an @ character before a JavaScript field name.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.5.0
5
CVSSv2
CVE-2017-18873
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2. It allows malicious users to cause a denial of service (channel invisibility) via a misformatted post.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of service
CVE-2024-27371
CVE-2024-20405
CVE-2024-31627
CVE-2024-31625
race condition
CVE-2024-4358
cross-site scripting
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »