Количество 3
Количество 3
CVE-2026-28735
Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to gain access to private repositories via modifying the scope parameter in the GitHub authorization URL.. Mattermost Advisory ID: MMSA-2026-00628
CVE-2026-28735
Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4 ...
GHSA-r5vf-grcx-5vqp
Mattermost allows authenticated users to gain access to private repositories
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-28735 Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to gain access to private repositories via modifying the scope parameter in the GitHub authorization URL.. Mattermost Advisory ID: MMSA-2026-00628 | CVSS3: 5.4 | 0% Низкий | 3 месяца назад |
| CVE-2026-28735 Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4 ... | CVSS3: 5.4 | 0% Низкий | 3 месяца назад |
| GHSA-r5vf-grcx-5vqp Mattermost allows authenticated users to gain access to private repositories | CVSS3: 5.4 | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу