Mattermost Server Input Validation Error Vulnerability (CNVD-2020-35457)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.2.0. An attacker can exploit the vulnerability with the help of a specially crafted post to cause a web browser to hang...

Mattermost Server Cross-Site Request Forgery Vulnerability (CNVD-2020-52029)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site request forgery vulnerability exists in Mattermost Server versions prior to 4.2.0, prior to 3.10.2, and prior to 3.9.2. The vulnerability stems from a WEB application that does not...

Mattermost Server Access Control Error Vulnerability (CNVD-2020-35183)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An Access Control Error vulnerability exists in Mattermost Server version 5.18.0, which arises from a network system or product that does not properly restrict access to resources from unauthorized...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41170)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.1. An attacker non-channel member can exploit the vulnerability to modify the channel using the Channel PATCH API...

Mattermost Server Resource Management Error Vulnerability

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A resource management error vulnerability exists in Mattermost Server versions prior to 5.18.0, which can be exploited by an attacker to cause a denial of service memory corruption...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-35337)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.0.0, prior to 3.10.2, and prior to 3.9.2. An attacker could exploit the vulnerability to gain access to other people's accoun...

Mattermost Server Cross-Site Request Forgery Vulnerability (CNVD-2020-35367)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site request forgery vulnerability exists in Mattermost Server, which stems from a WEB application that does not adequately validate whether a request is coming from a trusted user, and can ...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-35459)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.2.0, which stems from the program incorrectly handling brute force attacks. An attacker could exploit the vulnerability to...

Mattermost Server Input Validation Error Vulnerability (CNVD-2020-48241)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.2.0, 4.1.1, and 4.0.5. An attacker could exploit the vulnerability to conduct a phishing attack...

Mattermost Server Authorization Issues Vulnerability (CNVD-2020-35462)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.0.2. An attacker could exploit the vulnerability to obtain information...

Mattermost Server Trust Management Issues Vulnerability (CNVD-2020-35447)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.9.0 that stems from encryption and signature verification not being mandatory. No details of the vulnerability are provided a...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41490)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.8.0 that stems from the program not following domain name requirements when processing join requests for public teams. An...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-35439)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server that can be exploited by an attacker to modify the Update/Patch Channel endpoints of a private channel...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35333)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 2.2.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Mattermost Server Path Traversal Vulnerability (CNVD-2020-35450)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.8.2, prior to 3.7.5, and prior to 3.6.7. An attacker could exploit the vulnerability to execute code...

Mattermost Server Input Validation Error Vulnerability (CNVD-2020-48226)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An input validation error vulnerability exists in Mattermost Server versions prior to 4.7.0, prior to 4.6.2, and prior to 4.5.2, which stems from the program's failure to enforce the expiration date...

Mattermost Server Resource Management Error Vulnerability (CNVD-2020-35451)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 1.2.0. An attacker can exploit this vulnerability to cause a denial of service with a small compressed file...

Mattermost Server Authorization Issues Vulnerability (CNVD-2020-35464)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.0.0. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-36215)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.3.0. An attacker can exploit this vulnerability to perform timing attacks...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-48230)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 4.3.0, prior to 4.2.1, and prior to 4.1.2. The vulnerability stems from a lack of proper validation of client data ...