Mattermost — безопасная платформа для совместной работы, позволяющая объединить ваши команды, инструменты и процессы для ускорения критически важной работы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 300
CVE-2023-27264
A missing permissions check in Mattermost Playbooks in Mattermost allo ...
CVE-2023-27263
A missing permissions check in the /plugins/playbooks/api/v0/runs API ...
GHSA-7rfw-qh9g-vg98
A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.
GHSA-j3wj-gffr-9v8h
A missing permissions check in the /plugins/playbooks/api/v0/runs API in Mattermost allows an attacker to list and view playbooks belonging to a team they are not a member of.
CVE-2022-4044
A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages.
CVE-2022-4045
A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data.
CVE-2022-4019
A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints.
CVE-2022-4044
A denial-of-service vulnerability in Mattermost allows an authenticate ...
CVE-2022-4045
A denial-of-service vulnerability in the Mattermost allows an authenti ...
GHSA-5jph-wrq7-v9hf
Denial of service in Mattermost
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2023-27264 A missing permissions check in Mattermost Playbooks in Mattermost allo ... | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
| CVE-2023-27263 A missing permissions check in the /plugins/playbooks/api/v0/runs API ... | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
| GHSA-7rfw-qh9g-vg98 A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
| GHSA-j3wj-gffr-9v8h A missing permissions check in the /plugins/playbooks/api/v0/runs API in Mattermost allows an attacker to list and view playbooks belonging to a team they are not a member of. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-4044 A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages. | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
| CVE-2022-4045 A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data. | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
| CVE-2022-4019 A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints. | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
| CVE-2022-4044 A denial-of-service vulnerability in Mattermost allows an authenticate ... | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
| CVE-2022-4045 A denial-of-service vulnerability in the Mattermost allows an authenti ... | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
| GHSA-5jph-wrq7-v9hf Denial of service in Mattermost | CVSS3: 6.5 | 1% Низкий | почти 4 года назад |
Уязвимостей на страницу