github.com/mattermost/mattermost vulnerabilities (Go)
11 vulnerabilities.
-
github.com/mattermost/mattermostGo Lack of Invalidation of Legacy Remote Cluster Invite Tokens After Confirmation 3.7 Low -
github.com/mattermost/mattermostGo Open redirect in error page when link opened in new tab 3.1 Low -
github.com/mattermost/mattermostGo Mattermost GitHub Plugin allows unauthorized GitHub reactions via reaction forwarding hijacking 3.0 Low -
github.com/mattermost/mattermostGo Unauthorized access and subscription vulnerability in Boards 3.1 Low -
github.com/mattermost/mattermostGo Insecure Direct Object Reference in Mattermost Boards Plugin Enables Unauthorised Comment Deletion 4.3 Medium -
github.com/mattermost/mattermostGo Guest user can discover archived public channels 4.3 Medium -
github.com/mattermost/mattermostGo Cross-team channel membership access 3.1 Low -
github.com/mattermost/mattermostGo Malicious remote can claim that a user was synced from another remote 2.7 Low -
github.com/mattermost/mattermostGo Malicious remote can make an arbitrary local channel read-only 4.1 Medium -
github.com/mattermost/mattermostGo Malicious remote can create/update/delete arbitrary posts in arbitrary channels 5.5 Medium -
github.com/mattermost/mattermostGo Mattermost Server Sensitive Data Exposure 5.3 Medium