Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/18 9:31 a.m.12 views

GHSA-82J6-4FQ7-FX62 Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows an attacker with access to a support packet to obtain TURN server credentials via the plaintext values present in the exported plugi...

7.6CVSS5.8AI score0.00266EPSS
SaveExploits0References4
Rows per page
Query Builder