Mattermost — безопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 245
CVE-2023-5968
Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body.
CVE-2023-5968
Mattermost fails to properly sanitize the user object when updating th ...
CVE-2023-5967
Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin
CVE-2023-5967
Mattermost fails to properly validate requests to the Calls plugin, al ...
GHSA-2w9p-mj8f-374x
Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel.
CVE-2023-5522
Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel.
GHSA-4f96-v6r6-c7jh
Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled
CVE-2023-5160
Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled
CVE-2023-5160
Mattermost fails to check the Show Full Name option at the /api/v4/tea ...
GHSA-h69v-mvh9-hfrq
Mattermost Incorrect Authorization vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2023-5968 Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. | CVSS3: 4.9 | 0% Низкий | почти 2 года назад | |
CVE-2023-5968 Mattermost fails to properly sanitize the user object when updating th ... | CVSS3: 4.9 | 0% Низкий | почти 2 года назад | |
CVE-2023-5967 Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin | CVSS3: 4.3 | 0% Низкий | почти 2 года назад | |
CVE-2023-5967 Mattermost fails to properly validate requests to the Calls plugin, al ... | CVSS3: 4.3 | 0% Низкий | почти 2 года назад | |
GHSA-2w9p-mj8f-374x Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel. | CVSS3: 4.3 | 0% Низкий | около 2 лет назад | |
CVE-2023-5522 Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel. | CVSS3: 4.3 | 0% Низкий | около 2 лет назад | |
GHSA-4f96-v6r6-c7jh Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled | CVSS3: 4.3 | 0% Низкий | около 2 лет назад | |
CVE-2023-5160 Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled | CVSS3: 4.3 | 0% Низкий | около 2 лет назад | |
CVE-2023-5160 Mattermost fails to check the Show Full Name option at the /api/v4/tea ... | CVSS3: 4.3 | 0% Низкий | около 2 лет назад | |
GHSA-h69v-mvh9-hfrq Mattermost Incorrect Authorization vulnerability | CVSS3: 4.3 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу