PT-2024-35098 · Mattermost +1 · Mattermost +1

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.2 Mattermost versions 10.0.x through 10.0.0 Description: The issue arises when searching for channel names in the channel switcher, allowing an attacker to obtain private channel names they are not a...

Elasticsearch 8.9.0, 7.17.13 Security Update

Elasticsearch uncontrolled resource consumption ESA-2023-13 An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP...