Логотип exploitDog
product: "mattermost"
Консоль
Логотип exploitDog

exploitDog

product: "mattermost"
Mattermost

Mattermostбезопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.

Релизный цикл, информация об уязвимостях

Продукт: Mattermost
Вендор: Mattermost

График релизов

5.46.16.26.37.06.47.17.27.32021202220232024202520262027202820292030

Недавние уязвимости Mattermost

Количество 239

nvd логотип

CVE-2023-2786

около 2 лет назад

Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-2786

около 2 лет назад

Mattermost fails to properly check thepermissions when executing comma ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-2784

около 2 лет назад

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps.

CVSS3: 4.2
EPSS: Низкий
debian логотип

CVE-2023-2784

около 2 лет назад

Mattermost fails to verify if the requestor is a sysadmin or not, befo ...

CVSS3: 4.2
EPSS: Низкий
nvd логотип

CVE-2023-2783

около 2 лет назад

Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to modify the contents of the post sent by the Apps.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-2783

около 2 лет назад

Mattermost Apps Framework fails to verify that a secret provided in th ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-vc9q-cghx-53cj

около 2 лет назад

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-2808

около 2 лет назад

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-2808

около 2 лет назад

Mattermost fails to normalize UTF confusable characters when determini ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-2514

около 2 лет назад

Mattermost Sever fails to redact the DB username and password before emitting an application log during server initialization. 

CVSS3: 6.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2023-2786

Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.

CVSS3: 4.3
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-2786

Mattermost fails to properly check thepermissions when executing comma ...

CVSS3: 4.3
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-2784

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps.

CVSS3: 4.2
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-2784

Mattermost fails to verify if the requestor is a sysadmin or not, befo ...

CVSS3: 4.2
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-2783

Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to modify the contents of the post sent by the Apps.

CVSS3: 4.3
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-2783

Mattermost Apps Framework fails to verify that a secret provided in th ...

CVSS3: 4.3
0%
Низкий
около 2 лет назад
github логотип
GHSA-vc9q-cghx-53cj

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.

CVSS3: 4.3
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-2808

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.

CVSS3: 4.3
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-2808

Mattermost fails to normalize UTF confusable characters when determini ...

CVSS3: 4.3
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-2514

Mattermost Sever fails to redact the DB username and password before emitting an application log during server initialization. 

CVSS3: 6.7
0%
Низкий
около 2 лет назад

Уязвимостей на страницу


Поделиться