exploitDog

CVE-2026-6342

Опубликовано: 18 мая 2026

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to appropriately check for valid namespaces which allows plugin users to create subscriptions to groups that were not whitelisted via creating groups that share the same prefix as a whitelisted group. Mattermost Advisory ID: MMSA-2026-00601

Ссылки

https://mattermost.com/security-updates
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*

Версия от 10.13.0 (включая) до 10.13.11 (включая)

cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*

Версия от 11.1.0 (включая) до 11.1.5 (включая)

cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*

Версия от 11.3.0 (включая) до 11.3.4 (включая)

EPSS

Процентиль: 5%

0.00152

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

GHSA-x3f7-3cx7-2cw7

CVSS3: 4.3

github

3 месяца назад

Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to appropriately check for valid namespaces which allows plugin users to create subscriptions to groups that were not whitelisted via creating groups that share the same prefix as a whitelisted group. Mattermost Advisory ID: MMSA-2026-00601

EPSS

Процентиль: 5%

0.00152

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863