github.com/mattermost/mattermost-server/v6 vulnerabilities (Go)
222 vulnerabilities.
github.com/mattermost/mattermost-server/v6GoDenial of Service via crashing the Calls Plugin4.3 Mediumgithub.com/mattermost/mattermost-server/v6GoA system/user manager can demote / deactivate another manager2.7 Lowgithub.com/mattermost/mattermost-server/v6GoA team member can soft delete other teams that they are not part of6.5 Mediumgithub.com/mattermost/mattermost-server/v6GoSystem Role with manage posts permission can read posts of Direct Messages4.9 Mediumgithub.com/mattermost/mattermost-server/v6GoDoS via Channel Notification Properties6.5 Mediumgithub.com/mattermost/mattermost-server/v6GoA User Manager role with user edit permissions could manage/update bots3.8 Lowgithub.com/mattermost/mattermost-server/v6GoAudit logging fails to sanitize post metadata4.5 Mediumgithub.com/mattermost/mattermost-server/v6GoIncorrect authorization allows a user manager to update a system admin6.7 Mediumgithub.com/mattermost/mattermost-server/v6GoA guest user can perform various actions on public playbooks6.3 Mediumgithub.com/mattermost/mattermost-server/v6GoAttachment of deleted message in a thread remains accessible and downloadable3.1 Lowgithub.com/mattermost/mattermost-server/v6GoApp Framework does not checks for the secret provided in the incoming webhook request4.3 Mediumgithub.com/mattermost/mattermost-server/v6GoPrivilege escalation to system admin via personal access tokens4.7 Mediumgithub.com/mattermost/mattermost-server/v6GoInformation disclosure in linked message previews6.5 Mediumgithub.com/mattermost/mattermost-server/v6GoStored XSS via SVG attachment on Boards7.3 Highgithub.com/mattermost/mattermost-server/v6GoUnsanitized events sent over Websocket to regular users in a High Availability environment4.3 Mediumgithub.com/mattermost/mattermost-server/v6GoUnauthorized email invite to a private channel4.2 Mediumgithub.com/mattermost/mattermost-server/v6GoServer-side Denial of Service while processing a specifically crafted GIF file3.1 Lowgithub.com/mattermost/mattermost-server/v6GoTeam members could access sensitive information of other users via an API call6.5 Mediumgithub.com/mattermost/mattermost-server/v6GoAuthorized users are allowed to install old plugin versions from the Marketplace4.7 Mediumgithub.com/mattermost/mattermost-server/v6GoInvitation Email is resent as a Reminder after invalidating pending email invites3.7 Lowgithub.com/mattermost/mattermost-server/v6GoRestricted custom admin role can bypass the restrictions and view the server logs and server config.json file contents4.3 Mediumgithub.com/mattermost/mattermost-server/v6GoOOM DoS in Mattermost image proxy4.3 Medium