Mattermost

Mattermost Server

312 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2017-18918

  • EPSS 0.1%
  • Published 19.06.2020 20:15:12
  • Last modified 21.11.2024 03:21:15

An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname.

5.3

CVE-2017-18919

  • EPSS 0.22%
  • Published 19.06.2020 20:15:12
  • Last modified 21.11.2024 03:21:15

An issue was discovered in Mattermost Server before 3.7.0 and 3.6.3. Attackers can use the API for unauthenticated team creation.

9.8

CVE-2017-18920

  • EPSS 0.5%
  • Published 19.06.2020 20:15:12
  • Last modified 21.11.2024 03:21:15

An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy.

6.1

CVE-2017-18921

  • EPSS 0.36%
  • Published 19.06.2020 20:15:12
  • Last modified 21.11.2024 03:21:15

An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. XSS can occur via a link on an error page.

7.5

CVE-2016-11069

  • EPSS 0.2%
  • Published 19.06.2020 20:15:11
  • Last modified 21.11.2024 02:45:25

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change.

5.4

CVE-2016-11070

  • EPSS 0.34%
  • Published 19.06.2020 20:15:11
  • Last modified 21.11.2024 02:45:25

An issue was discovered in Mattermost Server before 3.1.0. It allows XSS via theme color-code values.

6.1

CVE-2016-11071

  • EPSS 0.36%
  • Published 19.06.2020 20:15:11
  • Last modified 21.11.2024 02:45:25

An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place.

6.5

CVE-2016-11072

  • EPSS 0.19%
  • Published 19.06.2020 20:15:11
  • Last modified 21.11.2024 02:45:26

An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled.

6.1

CVE-2016-11073

  • EPSS 0.42%
  • Published 19.06.2020 20:15:11
  • Last modified 21.11.2024 02:45:26

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting.

9.8

CVE-2016-11074

  • EPSS 0.41%
  • Published 19.06.2020 20:15:11
  • Last modified 21.11.2024 02:45:26

An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused.