Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mattermost mattermost vulnerabilities and exploits
(subscribe to this query)
9.1
CVSSv3
CVE-2017-18883
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
8.1
CVSSv3
CVE-2017-18884
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2. It allows malicious users to gain privileges by using a registered OAuth application with personal access tokens.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
9.8
CVSSv3
CVE-2017-18885
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2. It allows malicious users to gain privileges by accessing unintended API endpoints on a user's behalf.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
8.8
CVSSv3
CVE-2017-18886
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2. It allows a bypass of restrictions on use of slash commands.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
5.3
CVSSv3
CVE-2017-18887
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2. It discloses the team creator's e-mail address to members.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
9.8
CVSSv3
CVE-2017-18888
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2. It allows SQL injection during the fetching of multiple posts.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
4.3
CVSSv3
CVE-2017-18889
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
4.3
CVSSv3
CVE-2017-18890
An issue exists in Mattermost Server prior to 4.3.0, 4.2.1, and 4.1.2. It allows an malicious user to create a button that, when pressed by a user, launches an API request.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.3.0
6.1
CVSSv3
CVE-2017-18891
An issue exists in Mattermost Server prior to 4.2.0, 4.1.1, and 4.0.5. It allows Phishing because an error page can have a link.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.2.0
6.1
CVSSv3
CVE-2017-18892
An issue exists in Mattermost Server prior to 4.2.0, 4.1.1, and 4.0.5. E-mail templates can have a field in which HTML content is not neutralized.
Mattermost Mattermost Server
Mattermost Mattermost Server 4.2.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of service
CVE-2024-27371
CVE-2024-20405
CVE-2024-31627
CVE-2024-31625
race condition
CVE-2024-4358
cross-site scripting
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »