Mattermost — безопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 245
GHSA-33r7-wjfc-7w98
Mattermost Uncontrolled Resource Consumption vulnerability
GHSA-9hwp-cj7m-wjw4
Mattermost Incorrect Authorization vulnerability
GHSA-rp65-jpc7-8h8p
Mattermost Incorrect Authorization vulnerability
GHSA-h8wh-f7gw-fwpr
Mattermost Incorrect Authorization vulnerability
CVE-2023-5196
Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users.
CVE-2023-5196
Mattermost fails to enforce character limits in all possible notificat ...
CVE-2023-5195
Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of
CVE-2023-5195
Mattermost fails to properly validate the permissions when soft deleti ...
CVE-2023-5194
Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager
CVE-2023-5194
Mattermost fails to properly validate permissions when demoting and de ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-33r7-wjfc-7w98 Mattermost Uncontrolled Resource Consumption vulnerability | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| GHSA-9hwp-cj7m-wjw4 Mattermost Incorrect Authorization vulnerability | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| GHSA-rp65-jpc7-8h8p Mattermost Incorrect Authorization vulnerability | CVSS3: 2.7 | 0% Низкий | около 2 лет назад |
| GHSA-h8wh-f7gw-fwpr Mattermost Incorrect Authorization vulnerability | CVSS3: 2.7 | 0% Низкий | около 2 лет назад |
 | CVE-2023-5196 Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop resulting in the server consuming an abnormal quantity of computing resources and possibly becoming temporarily unavailable for its users. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| CVE-2023-5196 Mattermost fails to enforce character limits in all possible notificat ... | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| CVE-2023-5195 Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| CVE-2023-5195 Mattermost fails to properly validate the permissions when soft deleti ... | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| CVE-2023-5194 Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager | CVSS3: 2.7 | 0% Низкий | около 2 лет назад |
| CVE-2023-5194 Mattermost fails to properly validate permissions when demoting and de ... | CVSS3: 2.7 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу