Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Mattermost

Mattermostбезопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.

Релизный цикл, информация об уязвимостях

Продукт: Mattermost
Вендор: Mattermost

График релизов

5.46.16.26.37.06.47.17.27.38.07.48.12021202220232024202520262027202820292030

Недавние уязвимости Mattermost

Количество 300

debian логотип

CVE-2023-2831

около 3 лет назад

Mattermost fails to unescape Markdown strings in a memory-efficient wa ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2023-2797

около 3 лет назад

Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.

CVSS3: 3.1
EPSS: Низкий
debian логотип

CVE-2023-2797

около 3 лет назад

Mattermost fails to sanitize code permalinks, allowing an attacker to ...

CVSS3: 3.1
EPSS: Низкий
nvd логотип

CVE-2023-2793

около 3 лет назад

Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an attacker to cause a denial-of-service by a linking to a specially crafted webpage in a message.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-2793

около 3 лет назад

Mattermost fails to validate links on external websites when construct ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-2792

около 3 лет назад

Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-2792

около 3 лет назад

Mattermost fails to sanitize ephemeral error messages, allowing an att ...

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-2785

около 3 лет назад

Mattermost fails to properly truncate the postgres error log message of a search query failure allowing an attacker to cause the creation of large log files which can result in Denial of Service

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2023-2785

около 3 лет назад

Mattermost fails to properly truncate the postgres error log message o ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-8jf2-78m7-7f8v

около 3 лет назад

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps.

CVSS3: 4.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2023-2831

Mattermost fails to unescape Markdown strings in a memory-efficient wa ...

CVSS3: 4.3
1%
Низкий
около 3 лет назад
nvd логотип
CVE-2023-2797

Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.

CVSS3: 3.1
0%
Низкий
около 3 лет назад
debian логотип
CVE-2023-2797

Mattermost fails to sanitize code permalinks, allowing an attacker to ...

CVSS3: 3.1
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2023-2793

Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an attacker to cause a denial-of-service by a linking to a specially crafted webpage in a message.

CVSS3: 6.5
1%
Низкий
около 3 лет назад
debian логотип
CVE-2023-2793

Mattermost fails to validate links on external websites when construct ...

CVSS3: 6.5
1%
Низкий
около 3 лет назад
nvd логотип
CVE-2023-2792

Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command.

CVSS3: 6.5
1%
Низкий
около 3 лет назад
debian логотип
CVE-2023-2792

Mattermost fails to sanitize ephemeral error messages, allowing an att ...

CVSS3: 6.5
1%
Низкий
около 3 лет назад
nvd логотип
CVE-2023-2785

Mattermost fails to properly truncate the postgres error log message of a search query failure allowing an attacker to cause the creation of large log files which can result in Denial of Service

CVSS3: 4.3
1%
Низкий
около 3 лет назад
debian логотип
CVE-2023-2785

Mattermost fails to properly truncate the postgres error log message o ...

CVSS3: 4.3
1%
Низкий
около 3 лет назад
github логотип
GHSA-8jf2-78m7-7f8v

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps.

CVSS3: 4.2
0%
Низкий
около 3 лет назад

Уязвимостей на страницу


Поделиться