Skip to contentMattermost Server vulnerabilities
- mattermost serverMattermost Server has mishandled webhook access controlCVE-2017-18870Fix available4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers...CVE-2018-212595.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles...CVE-2019-208895.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of...CVE-2018-212487.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows...CVE-2019-208887.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes...CVE-2019-208867.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. An attacker could...CVE-2018-212638.8 High
- mattermost serverMattermost Server is vulnerable to a Denial of Service attack through `invite_people` commandCVE-2018-21258Fix available7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. An attacker could use...CVE-2018-212534.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address...CVE-2019-208904.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially...CVE-2019-208845.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not...CVE-2019-208874.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots...CVE-2019-208857.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only....CVE-2019-208834.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain...CVE-2019-208825.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks...CVE-2019-208817.3 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows...CVE-2019-208807.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e...CVE-2019-208794.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes,...CVE-2019-208784.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows...CVE-2019-208775.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Users can...CVE-2019-208765.4 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows a...CVE-2019-208755.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows...CVE-2019-208747.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows...CVE-2019-208736.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can...CVE-2019-208725.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown...CVE-2019-208717.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.10.0. An attacker can bypass the intended...CVE-2019-208704.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non...CVE-2019-208695.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated.CVE-2019-208687.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.11.0. An attacker can interfere with a...CVE-2019-208675.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.12.0. Use of a Proxy HTTP header, rather...CVE-2019-208665.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10....CVE-2019-208658.8 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.13.0. Incoming webhook creation is not...CVE-2019-208637.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.13.0. Non-members may fetch a team's slash...CVE-2019-208627.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows...CVE-2019-208605.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.15.0. Login access control can be bypassed...CVE-2019-208597.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial...CVE-2019-208587.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.16.0. It allows attackers to cause a denial...CVE-2019-208577.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows...CVE-2019-208557.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.17.0. It allows remote attackers to cause a...CVE-2019-208547.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0. An attacker can send a user_typing...CVE-2019-208475.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server...CVE-2019-208467.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial...CVE-2019-208457.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An...CVE-2019-208446.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7....CVE-2019-208437.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7....CVE-2019-208427.2 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7....CVE-2019-208418.8 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8....CVE-2020-14460Fix available6.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.19.0. Attackers can rename a channel and...CVE-2020-14459Fix available7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private...CVE-2020-14458Fix available7.5 High
- Show moreLoading…