Mattermost — безопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 300
CVE-2023-48268
Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards allowing an attacker to consume excessive resources, possibly leading to Denial of Service, by importing a board using a specially crafted zip (zip bomb).
CVE-2023-6202
Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker who is a guest user and knows the ID of another user to get their information (e.g. name, surname, nickname) via Mattermost Boards.
CVE-2023-47168
Mattermost fails to properly check a redirect URL parameter allowing f ...
CVE-2023-48268
Mattermost fails tolimit the amount of data extracted from compressed ...
CVE-2023-35075
Mattermost fails to use innerText /textContentwhen setting the channel ...
CVE-2023-43754
Mattermost fails to check whether the \u201cAllow users to view archiv ...
CVE-2023-48369
Mattermost fails to limit the log size of server logs allowing an atta ...
CVE-2023-40703
Mattermost fails to properly limit the characters allowed in different ...
CVE-2023-47865
Mattermost fails to check if hardened mode is enabled when overriding ...
CVE-2023-45223
Mattermost fails to properly validate the "Show Full Name" option in a ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2023-48268 Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards allowing an attacker to consume excessive resources, possibly leading to Denial of Service, by importing a board using a specially crafted zip (zip bomb). | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| CVE-2023-6202 Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker who is a guest user and knows the ID of another user to get their information (e.g. name, surname, nickname) via Mattermost Boards. | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| CVE-2023-47168 Mattermost fails to properly check a redirect URL parameter allowing f ... | CVSS3: 6.1 | 0% Низкий | почти 3 года назад |
| CVE-2023-48268 Mattermost fails tolimit the amount of data extracted from compressed ... | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| CVE-2023-35075 Mattermost fails to use innerText /textContentwhen setting the channel ... | CVSS3: 5.4 | 0% Низкий | почти 3 года назад |
| CVE-2023-43754 Mattermost fails to check whether the \u201cAllow users to view archiv ... | CVSS3: 4.3 | 1% Низкий | почти 3 года назад |
| CVE-2023-48369 Mattermost fails to limit the log size of server logs allowing an atta ... | CVSS3: 5.3 | 1% Низкий | почти 3 года назад |
| CVE-2023-40703 Mattermost fails to properly limit the characters allowed in different ... | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| CVE-2023-47865 Mattermost fails to check if hardened mode is enabled when overriding ... | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| CVE-2023-45223 Mattermost fails to properly validate the "Show Full Name" option in a ... | CVSS3: 4.3 | 1% Низкий | почти 3 года назад |
Уязвимостей на страницу