Exposição de Mattermost

Message boards
47
score de exposição
1
sites usam
0
em exploração
6
críticos

CVEs

480 resultados
CVE-2026-24458HIGHDoS attack via login attempts with multi-megabyte passwordsEPSS 0.3%CVE-2026-8821HIGHPlaybooks run owner channel membership permission bypassEPSS 0.3%CVE-2026-93848LOWMattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System AdministratorEPSS 0.3%CVE-2025-12689MEDIUMDoS in Calls plugin via malformed UTF-8 in WebSocket requestEPSS 0.3%CVE-2025-31363LOWData exfiltration via AI plugin Jira toolEPSS 0.3%CVE-2026-5139MEDIUMGitLab Plugin Allows Non-Admin Users to Modify Default Instance ConfigurationEPSS 0.3%CVE-2026-10085MEDIUMOrdinary group/direct message member can enable group_constrained and remove all channel participantsEPSS 0.3%CVE-2026-16044LOWInsufficient validation of guest board admin privileges on archive importEPSS 0.3%CVE-2024-42000LOWUnauthorized Access to view channels' detailsEPSS 0.3%CVE-2026-16251MEDIUMMattermost local image proxy allows server memory exhaustion via unbounded image response bufferingEPSS 0.3%CVE-2025-2564MEDIUMUnauthorized View Access to Archived Channel Member InfoEPSS 0.3%CVE-2026-25780MEDIUMMemory Exhaustion via Malformed DOC File UploadEPSS 0.3%CVE-2026-3108HIGHTerminal Escape Injection in mmctl Report Posts CommandEPSS 0.3%CVE-2024-39837LOWMalicious remote can create arbitrary channelsEPSS 0.3%CVE-2024-5272MEDIUMRun Details leak to guest via webhook event "custom_playbooks_playbook_run_updated"EPSS 0.3%CVE-2025-30516LOWUnauthorized Notification Exposure in Mobile App Under Specific ConditionsEPSS 0.3%CVE-2023-3586MEDIUM Disabling publicly-shared boards does not disable existing publicly available board linksEPSS 0.3%CVE-2024-50052MEDIUMArbitrary post deletion via Playbooks /ignore-thread endpointEPSS 0.3%CVE-2024-43780MEDIUMUnauthorized channel file uploadEPSS 0.3%CVE-2025-41423LOWUnauthorized Playbooks Post Deletion in Mattermost Playbooks PluginEPSS 0.3%