Lucene search
K

7 matches found

OSV
OSV
added 2024/06/05 3:10 p.m.8 views

GO-2024-2795 Mattermost crashes web clients via a malformed custom status in github.com/mattermost/mattermost-server

Mattermost crashes web clients via a malformed custom status in github.com/mattermost/mattermost-server...

4.3CVSS4.4AI score0.00193EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2024/04/26 12:11 p.m.10 views

CVE-2024-4182

A flaw was found in Mattermost, where it fails to handle JSON parsing errors in custom status values. This flaw allows an authenticated attacker to crash other users' web clients via a malformed custom status...

4.3CVSS6.8AI score0.00193EPSS
Exploits0References4
OSV
OSV
added 2024/04/26 9:30 a.m.18 views

GHSA-8F99-G2PJ-X8W3 Mattermost crashes web clients via a malformed custom status

Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.12 fail to handle JSON parsing errors in custom status values, which allows an authenticated attacker to crash other users' web clients via a malformed custom status...

4.3CVSS4.3AI score0.00193EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2024/04/26 9:30 a.m.26 views

Mattermost crashes web clients via a malformed custom status

Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.12 fail to handle JSON parsing errors in custom status values, which allows an authenticated attacker to crash other users' web clients via a malformed custom status...

4.3CVSS6.6AI score0.00193EPSS
Exploits0References7Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/26 8:25 a.m.10 views

CVE-2024-4182

Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.12 fail to handle JSON parsing errors in custom status values, which allows an authenticated attacker to crash other users' web clients via a malformed custom status...

4.3CVSS6.5AI score0.00193EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/11/24 12:0 a.m.3 views

PT-2023-31143 · Unknown · Uptime Kuma

Name of the Vulnerable Software and Affected Versions: Uptime Kuma versions prior to 1.23.7 Description: The Google Analytics element in Uptime Kuma is vulnerable to Attribute Injection, leading to Cross-Site-Scripting XSS attacks. This occurs because the custom status interface can set an...

6.3CVSS5.9AI score0.00525EPSS
Exploits1References8
Check Point Advisories
Check Point Advisories
added 2010/01/05 12:0 a.m.0 views

Security Best Practice: Blocking Yahoo! Messenger

Instant Messaging applications allow communication and collaboration between Internet users using various modes of communication, including instant messages exchange, voice and video, application sharing, white board, file transfer and remote assistance.Yahoo! Messenger is an...

7AI score
Exploits0
Rows per page
Query Builder