28 matches found
CVE-2019-20868
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
Code injection
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
CVE-2019-20868
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
CVE-2019-20868
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated...
PT-2020-8448
Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 4.1.0 Mattermost Server version 4.0.4 and earlier Mattermost Server version 3.10.3 and earlier Description: An issue allows attackers to discover team invite IDs via "team API endpoints". Recommendations: F...
PT-2020-10831
Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.11.0 Description An issue was discovered where invite IDs were improperly generated. Recommendations For versions prior to 5.11.0, update to version 5.11.0 or later to resolve the issue...
CVE-2017-18902: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints...