mattermost vulnerabilities (Bitnami)
104 vulnerabilities.
-
mattermostBitnami Bypassing MFA Enforcement on Plugin Endpoints 7.5 High -
mattermostBitnami Unauthorized Bookmark Creation and Modification in Archived Channels 4.3 Medium -
mattermostBitnami MFA Enforcement Bypass in Search APIs 4.3 Medium -
mattermostBitnami Unauthorized Command Execution in Archived Channels 4.3 Medium -
mattermostBitnami Unauthorized Private-to-Public Channel Conversion 5.4 Medium -
mattermostBitnami Auto-Enrollment of Team Admins into Private Channels without explicit consent 3.3 Low -
mattermostBitnami Private channel names leaking when Elasticsearch is enabled 4.3 Medium -
mattermostBitnami MFA Code Replay 3.1 Low -
mattermostBitnami Unauthorized Access to view channels' details 2.7 Low -
mattermostBitnami Client-Side Path Traversal Leading to CSRF in Playbooks 4.6 Medium -
mattermostBitnami DoS via non-string message using permalink embed 3.1 Low -
mattermostBitnami Unauthorized access on archived channels 5.4 Medium -
mattermostBitnami Weak SSRF Filtering 3.1 Low -
mattermostBitnami Unauthorized access on archived channels via file links 3.1 Low -
mattermostBitnami Insufficient Electron Fuses Configuration 2.5 Low -
mattermostBitnami Silent Desktop Screenshot Capture 3.7 Low -
mattermostBitnami Unauthorized channel file upload 4.3 Medium -
mattermostBitnami Insufficient permissions checks on teams 6.0 Medium -
mattermostBitnami Unauthorized disabling of invite URL 2.7 Low -
mattermostBitnami Malicious remote can claim that a user was synced from another remote 2.7 Low -
mattermostBitnami Malicious remote can make an arbitrary local channel read-only 4.1 Medium -
mattermostBitnami Malicious remote can create/update/delete arbitrary posts in arbitrary channels 5.5 Medium -
mattermostBitnami Remote username set to an arbitrary string by remote user 4.3 Medium -
mattermostBitnami Malicious remote can create arbitrary channels 3.8 Low -
mattermostBitnami Mattermost fails to authenticate the source of certain types of post actions 6.5 Medium -
mattermostBitnami Invite ID available to team admins even without the "Add Members" permission 4.7 Medium -
mattermostBitnami DoS via a large number of User Preferences 4.3 Medium -
mattermostBitnami Users maintain access to active call after being removed from a channel 3.1 Low -
mattermostBitnami Reflected XSS in Mattermost Jira plugin 6.1 Medium -
mattermostBitnami Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before... 8.8 High -
mattermostBitnami Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before... 4.3 Medium -
mattermostBitnami Resource Exhaustion via the Invitation Feature 3.1 Low -
mattermostBitnami Mattermost fails to limit the number of role names 4.3 Medium -
mattermostBitnami Mattermost incorrectly allows access individual posts 3.1 Low -
mattermostBitnami Mattermost race condition 2.6 Low -
mattermostBitnami Mattermost allows attackers access to posts in channels they are not a member of 4.3 Medium -
mattermostBitnami Excessive resource consumption when sending long emoji names in user custom status 4.3 Medium -
mattermostBitnami Team associated AD/LDAP Groups Leaked due to missing authorization 4.3 Medium -
mattermostBitnami Denial of service in mattermost mobile apps and server via emoji reactions 4.3 Medium -
mattermostBitnami Incorrect Authorization leads to Channel Member Count Leak 3.1 Low -
mattermostBitnami Missing authorization allows users to access arbitrary security levels on Jira through webhooks (Jira Plugin) 3.4 Low -
mattermostBitnami CSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin) 3.5 Low -
mattermostBitnami Details of archived public channels are leaked to members of another team 4.3 Medium -
mattermostBitnami Lack of restriction to manage group names for freshly demoted guests 3.7 Low -
mattermostBitnami Keywords that trigger mentions are leaked to other users 4.3 Medium -
mattermostBitnami Mattermost Cross-site Scripting vulnerability 3.7 Low -
mattermostBitnami Leak Inaccessible Playbook Information via Channel Action IDOR 3.1 Low -
mattermostBitnami Reflected client side path traversal leading to CSRF in Playbooks 7.3 High -
mattermostBitnami Playbooks access/modification by removed team member 3.7 Low -
mattermostBitnami Playbook plugin crash via missing interface type assertion 4.3 Medium - Show olderLoading…