Mattermost — безопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 300
CVE-2023-2792
Mattermost fails to sanitize ephemeral error messages, allowing an att ...
CVE-2023-2791
When creating a playbook run via the /dialog API, Mattermost fails to ...
CVE-2023-2788
Mattermost fails to check if an admin user account active after an oau ...
CVE-2023-2783
Mattermost Apps Framework fails to verify that a secret provided in th ...
CVE-2023-2786
Mattermost fails to properly check thepermissions when executing comma ...
CVE-2023-2797
Mattermost fails to sanitize code permalinks, allowing an attacker to ...
GHSA-455c-vqrf-mghr
Mattermost Server Missing Authorization vulnerability
GHSA-8m2w-p6c5-hh6c
Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API.
GHSA-hrr7-x743-5wr4
Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.
GHSA-m9m2-f9hg-rh66
When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated attacker to edit an arbitrary channel post.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2023-2792 Mattermost fails to sanitize ephemeral error messages, allowing an att ... | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад | |
CVE-2023-2791 When creating a playbook run via the /dialog API, Mattermost fails to ... | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад | |
CVE-2023-2788 Mattermost fails to check if an admin user account active after an oau ... | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад | |
CVE-2023-2783 Mattermost Apps Framework fails to verify that a secret provided in th ... | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад | |
CVE-2023-2786 Mattermost fails to properly check thepermissions when executing comma ... | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад | |
CVE-2023-2797 Mattermost fails to sanitize code permalinks, allowing an attacker to ... | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад | |
GHSA-455c-vqrf-mghr Mattermost Server Missing Authorization vulnerability | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад | |
GHSA-8m2w-p6c5-hh6c Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад | |
GHSA-hrr7-x743-5wr4 Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands. | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад | |
GHSA-m9m2-f9hg-rh66 When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated attacker to edit an arbitrary channel post. | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу