Mattermost ≫ Mattermost Server

312 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

4.9

CVE-2017-18918

An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname.

5.3

An issue was discovered in Mattermost Server before 3.7.0 and 3.6.3. Attackers can use the API for unauthenticated team creation.

9.8

An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy.

6.1

An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. XSS can occur via a link on an error page.

7.5

An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change.

5.4

An issue was discovered in Mattermost Server before 3.1.0. It allows XSS via theme color-code values.

6.1

An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place.

6.5

An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled.

6.1

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting.

9.8

An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused.