Exposição de Mattermost

Message boards
47
score de exposição
1
sites usam
0
em exploração
6
críticos

CVEs

480 resultados
CVE-2026-1628MEDIUMMattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites.EPSS 0.2%CVE-2026-18256MEDIUMPrivate team metadata disclosure via the team search APIEPSS 0.2%CVE-2026-18223MEDIUMMattermost invitation tokens not bound to invited email address allowing unauthorized team and private channel accessEPSS 0.2%CVE-2026-75025MEDIUMMattermost Desktop local network access from server-rendered contentEPSS 0.2%CVE-2025-59480MEDIUMInadequate validation of SSO redirect credentials permits credential theftEPSS 0.2%CVE-2025-9078MEDIUMWeak cache keys lead to post IDOR and link preview poisoningEPSS 0.2%CVE-2026-22545LOWPassword Change Bypass via Auth Switch EndpointEPSS 0.2%CVE-2026-3590MEDIUMRace Condition in Guest Magic Link Authentication Allows Token ReuseEPSS 0.2%CVE-2026-28732MEDIUMSlash command trigger-word update allowed command hijackingEPSS 0.2%CVE-2026-6342MEDIUMGroup prefix matching bypass for subscriptionsEPSS 0.2%CVE-2026-3637MEDIUMMattermost fails to enforce create_post permission when editing postsEPSS 0.2%CVE-2026-4055MEDIUMInsufficient permission validation on cross-team playbook run creationEPSS 0.2%CVE-2026-28759MEDIUMInsufficient authorization in shared channel membership sync allows remote cluster to remove users from arbitrary channelsEPSS 0.2%CVE-2026-6689MEDIUM*Missing* {{invite_user}} *permission check on team creation allows unprivileged users to set open-invite and allowed-domains team settings*EPSS 0.2%CVE-2026-6341MEDIUMIncomplete group locking implementationEPSS 0.2%CVE-2026-93846LOWTeam admin can escalate a team member's permissions via the team member roles endpointEPSS 0.2%CVE-2026-18795MEDIUMMissing server side validation allowed user to quarantine a DM and GM postEPSS 0.1%CVE-2026-3473MEDIUMImproper file ownership validation in the Boards API allows unauthorised file accessEPSS 0.1%CVE-2023-5339MEDIUMMattermost Desktop logs all keystrokes during initial run after fresh installation EPSS 0.1%CVE-2025-62690LOWOpen redirect in error page when link opened in new tabEPSS 0.1%