Lucene search
+L

7 matches found

osv_go
osv_go
•added 2025/12/08 9:31 p.m.•22 views

GO-2025-4190 Mattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page in github.com/mattermost/mattermost-server

Mattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page in github.com/mattermost/mattermost-server...

6.1CVSS7.1AI score0.0069EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/05/24 5:21 p.m.•17 views

Mattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page...

6.1CVSS6.4AI score0.0069EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/24 5:21 p.m.•17 views

GHSA-9X8X-W6G5-HX4W Mattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page...

5.3CVSS6.2AI score0.0069EPSS
SaveExploits0References3
Mend
Mend
•added 2020/06/19 4:50 p.m.•2 views

CVE-2017-18877

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page...

6.1CVSS0.0069EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/19 12:00 a.m.•4 views

CVE-2017-18877: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page...

6.1CVSS5.7AI score0.0069EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/09/19 12:00 a.m.•0 views

PT-2017-6373

Name of the Vulnerable Software and Affected Versions Netsweeper versions prior to 3.1.10 Netsweeper versions 4.0.x prior to 4.0.9 Netsweeper versions 4.1.x prior to 4.1.2 Description The issue allows remote attackers to obtain sensitive information by making a request that redirects to the deny...

7.5CVSS0.02447EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/19 12:00 a.m.•8 views

CVE-2014-9616: Exposure of Sensitive Information to an Unauthorized Actor

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive information by making a request that redirects to the deny page...

7.5CVSS7.3AI score0.02447EPSS
SaveExploits1References2
Rows per page
Query Builder