Логотип exploitDog
product: "mattermost"
Консоль
Логотип exploitDog

exploitDog

product: "mattermost"
Mattermost

Mattermostбезопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.

Релизный цикл, информация об уязвимостях

Продукт: Mattermost
Вендор: Mattermost

График релизов

5.46.16.26.37.06.47.17.27.32021202220232024202520262027202820292030

Недавние уязвимости Mattermost

Количество 245

nvd логотип

CVE-2023-5968

почти 2 года назад

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. 

CVSS3: 4.9
EPSS: Низкий
debian логотип

CVE-2023-5968

почти 2 года назад

Mattermost fails to properly sanitize the user object when updating th ...

CVSS3: 4.9
EPSS: Низкий
nvd логотип

CVE-2023-5967

почти 2 года назад

Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-5967

почти 2 года назад

Mattermost fails to properly validate requests to the Calls plugin, al ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-2w9p-mj8f-374x

около 2 лет назад

Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel. 

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-5522

около 2 лет назад

Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel. 

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-4f96-v6r6-c7jh

около 2 лет назад

Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-5160

около 2 лет назад

Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-5160

около 2 лет назад

Mattermost fails to check the Show Full Name option at the /api/v4/tea ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-h69v-mvh9-hfrq

около 2 лет назад

Mattermost Incorrect Authorization vulnerability

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2023-5968

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. 

CVSS3: 4.9
0%
Низкий
почти 2 года назад
debian логотип
CVE-2023-5968

Mattermost fails to properly sanitize the user object when updating th ...

CVSS3: 4.9
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2023-5967

Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin

CVSS3: 4.3
0%
Низкий
почти 2 года назад
debian логотип
CVE-2023-5967

Mattermost fails to properly validate requests to the Calls plugin, al ...

CVSS3: 4.3
0%
Низкий
почти 2 года назад
github логотип
GHSA-2w9p-mj8f-374x

Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel. 

CVSS3: 4.3
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-5522

Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel. 

CVSS3: 4.3
0%
Низкий
около 2 лет назад
github логотип
GHSA-4f96-v6r6-c7jh

Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled

CVSS3: 4.3
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-5160

Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled

CVSS3: 4.3
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-5160

Mattermost fails to check the Show Full Name option at the /api/v4/tea ...

CVSS3: 4.3
0%
Низкий
около 2 лет назад
github логотип
GHSA-h69v-mvh9-hfrq

Mattermost Incorrect Authorization vulnerability

CVSS3: 4.3
0%
Низкий
около 2 лет назад

Уязвимостей на страницу


Поделиться