252 matches found
PT-2025-4490 · Mattermost +1 · Mattermost +1
Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.0 through 9.11.5 Description: The issue is related to the failure of Mattermost to enforce invite permissions. This allows team admins, who do not have permission to invite users to their team, to invite users by maki...
Google Calendar Phishing Scam Targets Users with Malicious Invites
Protect yourself from sophisticated phishing attacks that leverage Google Calendar to steal your personal information...
Improper Input Validation
Synapse is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of invites received over federation, allowing a malicious server to send crafted invites that disrupt the affected user's ability to perform /sync operations...
SUSE CVE-2024-52815
Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects su...
DEBIAN-CVE-2024-52815
Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects su...
UBUNTU-CVE-2024-52815
Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects su...
PT-2024-35463
Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.120.1 Description Synapse is an open-source Matrix homeserver. The issue arises from the failure to properly validate invites received over federation, allowing a malicious server to send a specially crafted invite...
GO-2024-3240 Grafana org admin can delete pending invites in different org in github.com/grafana/grafana
Grafana org admin can delete pending invites in different org in github.com/grafana/grafana...
BIT-GRAFANA-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
SUSE CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
GHSA-66C4-2G2V-54QW Grafana org admin can delete pending invites in different org
Organization admins can delete pending invites created in an organization they are not part of...
Grafana org admin can delete pending invites in different org
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
UBUNTU-CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
CVE-2024-10452 affects Grafana (open‑source platform). The issue allows Organization administrators to delete pending invites in an organization they are not part of, representing an Authorization Bypass/Improper Access protection described in the connected advisories. Exploitation details are no...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
