Mattermost Server Security Vulnerabilities
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. It mishandles a deny action for a redirection.
6.1CVSS
6.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows crafted posts that potentially cause a web browser to hang.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It mishandles IP-based rate limiting.
5.3CVSS
5.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows CSV injection via a compliance report.
9.8CVSS
9.4AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover a team invite ID by requesting a JSON document.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. CSRF can occur if CORS is enabled.
8.8CVSS
8.7AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. It allows XSS via an uploaded file.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidation was mishandled.
5.3CVSS
5.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when Single Sign-On OAuth2 is used. An attacker could claim somebody else's account.
8.1CVSS
8AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. XSS could occur via a channel header.
6.1CVSS
5.8AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. A password-reset request was sometime sent to an attacker-provided e-mail address.
9.8CVSS
9.3AI Score
0.003EPSS
An issue was discovered in Mattermost Server before 3.9.0 when SAML is used. Encryption and signature verification are not mandatory.
7.5CVSS
7.5AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. E-mail notifications can have spoofed links.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. The X.509 certificate validation can be skipped for a TLS-based e-mail server.
9.1CVSS
9.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. It allows an attacker to specify a full pathname of a log file.
9.8CVSS
9.2AI Score
0.003EPSS
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. XSS can occur via a link on an error page.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. An external link can occur on an error page even if it is not on an allowlist.
5.3CVSS
5.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. After a restart of a server, an attacker might suddenly gain API Endpoint access.
9.8CVSS
9.5AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. API endpoint access control does not honor an integration permission restriction.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens.
7.5CVSS
7.5AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname.
4.9CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.7.0 and 3.6.3. Attackers can use the API for unauthenticated team creation.
5.3CVSS
5.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy.
9.8CVSS
9.4AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. XSS can occur via a link on an error page.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of superfluous authentication credentials.
7.5CVSS
7.6AI Score
0.002EPSS
3.7CVSS
4.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a denial of service (memory consumption) via crafted image dimensions.
6.5CVSS
6.3AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be bypassed if the channel name were not the same in the params and the body.
9.8CVSS
9.4AI Score
0.003EPSS
An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers could use multiple e-mail addresses to bypass a domain-based policy for signups.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. An attacker could use the invite_people slash command to invite a non-permitted user.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control (for direct-message channel creation) via the Message slash command.
4.3CVSS
4.7AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the Channel PATCH API to modify that channel.
4.3CVSS
4.5AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for group-message channel creation) via the Group message slash command.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for setting a channel header) via the Channel header slash command API.
5.3CVSS
5.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of service via the invite_people slash command.
7.5CVSS
7.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers to cause a denial of service (application hang) via a malformed link in a channel.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy.
2.7CVSS
4.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team invite_id, which leads to unintended excessive invitation privileges.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service (application crash) via invalid LaTeX text.
7.5CVSS
7.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. An attacker could authenticate to a different user's account via a crafted SAML response.
8.8CVSS
8.4AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. It did not enforce the expiration date of a SAML response.
8.8CVSS
8.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks.
8.8CVSS
8.5AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There is SQL injection by admins via SearchAllChannels.
7.2CVSS
7.4AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There are weak permissions for configuration files.
7.5CVSS
7.5AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel.
6.5CVSS
6.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service (memory consumption) via a large Slack import.
7.5CVSS
7.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage.
7.5CVSS
7.5AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 5.18.0. An attacker can send a user_typing WebSocket event to any channel.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 5.17.0. It allows remote attackers to cause a denial of service (client-side application crash) via a LaTeX message.
7.5CVSS
7.3AI Score
0.002EPSS