7508 matches found
CVE-2019-20860
An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows remote attackers to cause a denial of service application hang via a crafted SVG document...
CVE-2019-20860
Mattermost Server is affected by CVE-2019-20860 in versions prior to 5.14.0, 5.13.3, 5.12.6, and 5.9.4. The issue allows a remote attacker to trigger a denial of service (application hang) by supplying a crafted SVG document. This vulnerability is documented across multiple sources (NVD entry and...
CVE-2019-20859
Mattermost Server code path handling login can be bypassed by crafting input in versions prior to 5.15.0. This is reported across multiple sources (NVD entry CVE-2019-20859 and connected advisories), describing a login access control bypass issue. The documents identify the affected product and v...
CVE-2019-20859
An issue was discovered in Mattermost Server before 5.15.0. Login access control can be bypassed via crafted input...
CVE-2019-20858
Mattermost Server vulnerable to a DoS via crafted characters in a SQL LIKE clause to an APIv4 endpoint, affecting versions before 5.15.0. Root cause tied to SQL LIKE handling in the APIv4 path; impact is CPU consumption (high). No exploitation details are provided in the sources. Remediation: upg...
CVE-2019-20858
An issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial of service CPU consumption via crafted characters in a SQL LIKE clause to an APIv4 endpoint...
CVE-2019-20857
CVE-2019-20857 affects Mattermost Server prior to 5.16.0. The issue allows a denial of service by triggering a markdown renderer hang when processing many backtick characters. Multiple connected sources (Red Hat CVE entry, NVD entry, CNVD/EUVD mirrors, OSV, etc.) confirm the same description. No ...
CVE-2019-20857
An issue was discovered in Mattermost Server before 5.16.0. It allows attackers to cause a denial of service markdown renderer hang via many backtick characters...
CVE-2019-20856
CVE-2019-20856 affects Mattermost Desktop App on macOS prior to 4.3.0. The connected documents describe a vulnerability that enables dylib injection , but do not provide concrete details about the root cause beyond that description. The impact is described as the ability to inject dynamic librari...
CVE-2019-20856
An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection...
CVE-2019-20855
An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows attackers to obtain sensitive information local files during legacy attachment migration...
CVE-2019-20855
Mattermost Server contains an information disclosure flaw in legacy attachment migration affecting versions before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. The issue allows an attacker to obtain sensitive local files due to improper handling during migration. The connected documents confirm the affecte...
CVE-2019-20854
An issue was discovered in Mattermost Server before 5.17.0. It allows remote attackers to cause a denial of service client-side application crash via a LaTeX message...
CVE-2019-20854
Mattermost Server before 5.17.0 is affected. The issue allows remote attackers to cause a denial-of-service by sending a LaTeX message, triggering a client-side crash. Root cause details are not explicitly described in the provided documents. Exploitation status is not detailed. No remediation or...
CVE-2019-20853
An issue was discovered in Mattermost Packages before 5.16.3. A Droplet could allow Internet access to a service that has a remote code execution problem...
CVE-2019-20853
CVE-2019-20853 affects Mattermost Packages before 5.16.3. A Droplet could expose an Internet-accessible service with a remote code execution vulnerability. Vendors in connected docs confirm Mattermost Packages prior to 5.16.3 are vulnerable; remediation is to upgrade to 5.16.3 or later. Impacts i...
CVE-2019-20852
An issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for sensitive information e.g., server addresses or message content...
CVE-2019-20852
Mattermost Mobile Apps prior to version 1.26.0 contain a local-logging issue where sensitive information (e.g., server addresses or message content) is not blocked from being written to device logs. The Red Hat/CVE entries confirm this description. Impact is stated as exposure of sensitive data t...
CVE-2019-20851
Mattermost Mobile Apps (before 1.26.0) is affected by a path traversal vulnerability via the Video Preview feature that can overwrite arbitrary files on a device. This is corroborated by multiple sources (NVD, Red Hat CVE page, CNVD, PRION, etc.). Root cause: directory traversal in the Video Prev...