Mattermost — безопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 300
CVE-2023-4105
Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of a deleted message
CVE-2023-4107
Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name.
CVE-2023-4106
Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks.
CVE-2023-4106
Mattermost fails to check if the requesting user is a guest before per ...
CVE-2023-4108
Mattermost fails to sanitize post metadata during audit logging result ...
CVE-2023-4107
Mattermost fails to properly validate the requesting user permissions ...
CVE-2023-4105
Mattermost fails to delete the attachments when deleting a message in ...
GHSA-g3v6-r8p9-wxg9
Mattermost fails to correctly delete attachments
GHSA-p267-jjfq-pphf
Mattermost fails to check if user is a guest before performing actions on public playbooks
GHSA-9rww-66w7-7vjx
Mattermost fails to sanitize post metadata
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2023-4105 Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of a deleted message | CVSS3: 4.3 | 0% Низкий | около 3 лет назад | |
CVE-2023-4107 Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name. | CVSS3: 6.5 | 1% Низкий | около 3 лет назад | |
CVE-2023-4106 Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks. | CVSS3: 6.5 | 0% Низкий | около 3 лет назад | |
CVE-2023-4106 Mattermost fails to check if the requesting user is a guest before per ... | CVSS3: 6.5 | 0% Низкий | около 3 лет назад | |
CVE-2023-4108 Mattermost fails to sanitize post metadata during audit logging result ... | CVSS3: 7.5 | 1% Низкий | около 3 лет назад | |
CVE-2023-4107 Mattermost fails to properly validate the requesting user permissions ... | CVSS3: 6.5 | 1% Низкий | около 3 лет назад | |
CVE-2023-4105 Mattermost fails to delete the attachments when deleting a message in ... | CVSS3: 4.3 | 0% Низкий | около 3 лет назад | |
GHSA-g3v6-r8p9-wxg9 Mattermost fails to correctly delete attachments | CVSS3: 3.1 | 0% Низкий | около 3 лет назад | |
GHSA-p267-jjfq-pphf Mattermost fails to check if user is a guest before performing actions on public playbooks | CVSS3: 6.3 | 0% Низкий | около 3 лет назад | |
GHSA-9rww-66w7-7vjx Mattermost fails to sanitize post metadata | CVSS3: 4.5 | 1% Низкий | около 3 лет назад |
Уязвимостей на страницу