Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.7
CVE-2024-4195
- EPSS 0.14%
- Published 26.04.2024 09:15:12
- Last modified 12.05.2025 13:43:36
Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team admin to promote guests to team admins via crafted HTTP requests.
4.3
CVE-2019-1003026
- EPSS 0.03%
- Published 20.02.2019 21:29:00
- Last modified 21.11.2024 04:17:45
A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost s...
1