Exposición de Mattermost

Message boards
47
score de exposición
1
sitios usan
0
en explotación
6
críticos

CVEs

480 resultados
CVE-2025-54499LOWInsecure string comparison enables timing attacksEPSS 0.3%CVE-2026-4915MEDIUMServer panic via outgoing webhook responsesEPSS 0.3%CVE-2024-39361LOWCreating posts with user-defined IDs permitted in CreatePost APIEPSS 0.3%CVE-2025-4573MEDIUMLDAP Injection in Mattermost Enterprise Edition When Using Active DirectoryEPSS 0.3%CVE-2024-41162MEDIUMMalicious remote can make an arbitrary local channel read-onlyEPSS 0.3%CVE-2024-29977LOWMalicious remote can create arbitrary reactions on arbitrary postsEPSS 0.3%CVE-2025-9081LOWIDOR in board file download allows any user to download any file by UUIDEPSS 0.3%CVE-2024-5270MEDIUMSAML to email switch possible when email signin is disabledEPSS 0.3%CVE-2025-27571MEDIUMChannel metadata visible in archived channels despite configuration settingEPSS 0.3%CVE-2025-22449LOWAccess control flaw for team admins allows unauthorized team additionsEPSS 0.3%CVE-2026-3472LOWMarkdown image rendering bypass in AI bot tool result posts in MattermostEPSS 0.3%CVE-2026-9693LOWMattermost thread memberships persist after team removal, exposing private channel thread metadata on re-inviteEPSS 0.3%CVE-2026-16047MEDIUMBoard channel linking without read channel permission validationEPSS 0.3%CVE-2026-9824MEDIUMRemote cluster metadata enumeration via /share-channel autocompleteEPSS 0.3%CVE-2026-22892MEDIUMInsufficient Authorization in Mattermost Jira Plugin Allows Unauthorized Access to Post AttachmentsEPSS 0.3%CVE-2026-12985MEDIUMMattermost DCR redirect URI allowlist bypass via improper URL component validationEPSS 0.3%CVE-2026-93851HIGHPath traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted postEPSS 0.3%CVE-2026-6347HIGHMattermost Calls plugin exposes TURN server credentials in plaintext in support packetsEPSS 0.3%CVE-2024-1949LOWA race condition in Mattermost versions 8.1.x before 8.1.9, and 9.4.x before 9.4.2 allows an authenticated attacker to gain unauthorized accEPSS 0.3%CVE-2025-14273HIGHMattermost Jira plugin user spoofing enables Jira request forgery.EPSS 0.3%