Skip to contentMattermost vulnerabilities
Newest
- mattermost serverMattermost Server does not prevent System Admin from arbitrary file creationCVE-2017-18875Fix available4.9 Medium
- mattermost serverMattermost Server has mishandled webhook access controlCVE-2017-18870Fix available4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers...CVE-2018-212595.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles...CVE-2019-208895.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of...CVE-2018-212487.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows...CVE-2019-208887.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes...CVE-2019-208867.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. An attacker could...CVE-2018-212638.8 High
- mattermost serverMattermost Server is vulnerable to a Denial of Service attack through `invite_people` commandCVE-2018-21258Fix available7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. An attacker could use...CVE-2018-212534.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address...CVE-2019-208904.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially...CVE-2019-208845.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not...CVE-2019-208874.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots...CVE-2019-208857.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only....CVE-2019-208834.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain...CVE-2019-208825.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks...CVE-2019-208817.3 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows...CVE-2019-208807.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e...CVE-2019-208794.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes,...CVE-2019-208784.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows...CVE-2019-208775.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Users can...CVE-2019-208765.4 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows a...CVE-2019-208755.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows...CVE-2019-208747.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows...CVE-2019-208736.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can...CVE-2019-208725.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown...CVE-2019-208717.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.10.0. An attacker can bypass the intended...CVE-2019-208704.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non...CVE-2019-208695.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated.CVE-2019-208687.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.11.0. An attacker can interfere with a...CVE-2019-208675.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.12.0. Use of a Proxy HTTP header, rather...CVE-2019-208665.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10....CVE-2019-208658.8 High
- mattermost pluginsAn issue was discovered in Mattermost Plugins before 5.13.0. The GitHub plugin allows an attacker...CVE-2019-208647.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.13.0. Incoming webhook creation is not...CVE-2019-208637.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.13.0. Non-members may fetch a team's slash...CVE-2019-208627.5 High
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.2.2. It allows attackers to execute...CVE-2019-208618.8 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows...CVE-2019-208605.5 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.15.0. Login access control can be bypassed...CVE-2019-208597.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial...CVE-2019-208587.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.16.0. It allows attackers to cause a denial...CVE-2019-208577.5 High
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection.CVE-2019-208569.8 Critical
- mattermost serverAn issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows...CVE-2019-208557.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.17.0. It allows remote attackers to cause a...CVE-2019-208547.5 High
- mattermost packagesAn issue was discovered in Mattermost Packages before 5.16.3. A Droplet could allow Internet...CVE-2019-208539.8 Critical
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for...CVE-2019-208527.5 High
- mattermostAn issue was discovered in Mattermost Mobile Apps before 1.26.0. An attacker can use directory...CVE-2019-208519.1 Critical
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a...CVE-2019-208505.3 Medium
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a...CVE-2019-208495.3 Medium
- mattermost mobileAn issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature...CVE-2019-208487.5 High
- Show moreLoading…