1476 matches found
Unspecified Vulnerability in Mattermost Server (CNVD-2020-41174)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.8.1, 4.7.4 and 4.6.3. An attacker can use this vulnerability to obtain the inviteid of a team and then repeatedly ask...
CVE-2017-18902
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints...
Design/Logic Flaw
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover a team invite ID by requesting a JSON document...
Code injection
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints...
CVE-2017-18901
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover a team invite ID by requesting a JSON document...
CVE-2017-18901
Mattermost Server contains an information-disclosure issue (CVE-2017-18901) where an attacker can discover a private team invite ID by requesting a JSON document. Affected versions: Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. Root cause: exposure of invite identifiers through a JSON fetch....
CVE-2017-18901
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover a team invite ID by requesting a JSON document...
CVE-2018-21261
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team inviteid, which leads to unintended excessive invitation privileges...
CVE-2018-21261
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team inviteid, which leads to unintended excessive invitation privileges...
CVE-2018-21261
CVE-2018-21261 (Mattermost Server) affects versions prior to 4.8.1, 4.7.4, and 4.6.3. An email invite could include the team invite_id, leading to unintended excessive invitation privileges. Root cause: leakage of invite_id via invites; impact: users may gain expanded invitation privileges. No ex...
CVE-2018-21261
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team inviteid, which leads to unintended excessive invitation privileges...
CVE-2019-20868
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
CVE-2019-20868
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
Code injection
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
CVE-2019-20868
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
CVE-2019-20868
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
PT-2020-8904
Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 4.8.1 Mattermost Server version 4.7.4 Mattermost Server version 4.6.3 Description An issue was discovered where an e-mail invite accidentally included the team invite id, leading to unintended excessive...
PT-2020-8447
Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 4.1.0 Mattermost Server version 4.0.4 and earlier Mattermost Server version 3.10.3 and earlier Description: An issue allows attackers to discover a team invite ID by requesting a JSON document...
CVE-2017-18901: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover a team invite ID by requesting a JSON document...