Mattermost Server is vulnerable to SQL Injection when executing multiple POST requests

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows SQL injection during the fetching of multiple posts...

GHSA-G78F-6XQ7-RRHQ Mattermost Server allows attackers to gain privileges by accessing unintended API endpoints with users' credentials

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by accessing unintended API endpoints on a user's behalf...

Mattermost Server does not properly restrict use of slash commands

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows a bypass of restrictions on use of slash commands...

GHSA-35C4-5QFP-WXJ6 Mattermost Server exposes team creator's e-mail address to other members

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It discloses the team creator's e-mail address to members...

Mattermost Server exposes team creator's e-mail address to other members

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It discloses the team creator's e-mail address to members...

Mattermost Server allows users with a session ID to revoke another users' session

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. Knowledge of a session ID allows revoking another user's session...

GHSA-8QG8-C7MW-6FJ7 Mattermost Server is vulnerable to Directory Traversal by System Admins

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal...

CVE-2022-0562 affecting package libtiff for versions less than 4.3.0-2

CVE-2022-0562 affecting package libtiff for versions less than 4.3.0-2. A patched version of the package is available...

CVE-2022-22844 affecting package libtiff for versions less than 4.3.0-2

CVE-2022-22844 affecting package libtiff for versions less than 4.3.0-2. A patched version of the package is available...

CVE-2022-0561 affecting package libtiff for versions less than 4.3.0-2

CVE-2022-0561 affecting package libtiff for versions less than 4.3.0-2. A patched version of the package is available...

DEBIAN-CVE-2022-1210

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...

PT-2022-13714 · Libtiff +3 · Libtiff +3

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.3.0 Description: A problematic issue was found in the TIFF File Handler of tiff2ps. It allows for a denial of service when opening a malicious file. The attack can be launched remotely but requires user interaction...

CVE-2022-1210 LibTIFF tiff2ps resource consumption

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...

Design/Logic Flaw

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd...

CVE-2022-1056

CVE-2022-1056 is an Out-of-bounds Read in libtiff's tiffcrop utility (libtiff 4.3.0). A crafted TIFF file can trigger a denial-of-service via out-of-bounds access. The public description notes a fix is available for source builds via commit 46dc8fcd. Connected references enumerate libtiff/tiffcro...

PT-2022-13622 · Libtiff +3 · Libtiff +3

Name of the Vulnerable Software and Affected Versions: libtiff version 4.3.0 Description: The issue is an Out-of-bounds Read error in the tiffcrop function of libtiff, allowing attackers to cause a denial-of-service via a crafted tiff file. Recommendations: For version 4.3.0, the fix is available...

CVE-2022-1056

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd...

OESA-2022-1594 libtiff security update

This libtiff provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libti...

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

DEBIAN-CVE-2022-0924

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4...