CVE-2022-1332

One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file contents...

PT-2020-8007

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.0.0 Description: An issue in the System Console UI potentially allows attackers to obtain sensitive information, specifically credential fields within config.json. Recommendations: For versions prior to...

v2rayL Command Execution Vulnerability

v2rayL is a Linux GUI client software for v2ray agents. A security vulnerability exists in v2rayL version 2.1.3, which originates from the fact that /etc/v2rayL/config.json, owned by a low-privileged user, contains commands that can be run with root privileges. A local attacker can exploit this...