Vulnerabilities in Mattermost
512 resultsCVE-2023-48369MEDIUMLog Flooding due to specially crafted requests in different endpointsEPSS 0.6%CVE-2021-37860LOWMattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to inject arbitrary webEPSS 0.6%CVE-2024-54083MEDIUMDoS via lack of type validation in CallsEPSS 0.6%CVE-2023-5968MEDIUMPassword hash in response body after username updateEPSS 0.6%CVE-2023-2792MEDIUMEphemeral messages return private channel contents in permalink previewsEPSS 0.6%CVE-2023-5967MEDIUMDenial of Service via crashing the Calls PluginEPSS 0.6%CVE-2025-20033MEDIUMDoS via custom post type for sysconsole plugin readersEPSS 0.6%CVE-2024-4183MEDIUMMattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessiEPSS 0.6%CVE-2025-20051CRITICALArbitrary file read via block duplication in Mattermost BoardsEPSS 0.6%CVE-2023-3593MEDIUMServer crash via a specially crafted markdown inputEPSS 0.6%CVE-2023-4108MEDIUMAudit logging fails to sanitize post metadataEPSS 0.6%CVE-2022-1548LOWPlaybook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.EPSS 0.6%CVE-2023-2785MEDIUMSpecially crafted search query can cause large log entries in postgresEPSS 0.6%CVE-2022-2408MEDIUMGuest accounts can list all public channelsEPSS 0.6%CVE-2023-5876LOWRegex DoS from a malicious server enrolled in DesktopEPSS 0.6%CVE-2024-2450HIGHMattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctly verify account ownEPSS 0.6%CVE-2023-5333MEDIUM Denial of Service via multiple identical User IDs in /api/v4/users/idsEPSS 0.6%CVE-2023-5330MEDIUM Denial of Service via Opengraph Data CacheEPSS 0.6%CVE-2023-2193MEDIUMOauth authorization codes do not expire when deauthorizing an oauth2 appEPSS 0.6%CVE-2021-37864LOWUsers can view the contents of an archived channel when access is explicitly denied by the system adminEPSS 0.6%