Mattermost fails to properly restrict access to archived channel search API

Mattermost versions 11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the /api/v4/teams/teamid/channels/searcharchived endpoint...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in versions prior to Mattermost 11 that stems from a failure to properly restrict access to the archive channel search API, which could lead to the discovery of archived...

carnegiegreenaway.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-621737 Description| Value ---|--- Affected Website:| carnegiegreenaway.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

surinenglish.com XSS vulnerability

Vulnerable URL: http://www.surinenglish.com/archive-search/search?diaDesde=01=01=2006=12=07=2016=http://www.surinenglish.com/archive-search/search?diaDesde=01=01=2006=01=12=2019=%27%22%2F%3E%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E=medio=21=9 Details: Description...

phpBB SearchIndexer Mod - 'archive_topic.php' Remote File Inclusion

!/usr/bin/perl pbpbb archive for search engines Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://mambopower.net/ http://www.mamb...