1648 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the /api/v4/teams/teamid/channels/ids endpoint. An attacker can access sensitive channel metadata by sending requests as a guest user. Remediation Upgrade...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the fullyQualifiedRedirectURL function. An attacker can gain unauthorized access to any team by manipulating the invite token, bypassing intended restrictions. Remediation Upgrade...
Timing Attack
Overview github.com/mattermost/mattermost-server is an open source Slack-alternative in Golang and React. Affected versions of this package are vulnerable to Timing Attack via the IsValidWebAuthRedirectURL function. An attacker can obtain sensitive information such as Cloud API keys and OAuth...
Missing Authorization
Overview github.com/mattermost/mattermost-server is an open source Slack-alternative in Golang and React. Affected versions of this package are vulnerable to Missing Authorization via the /api/v4/teams/teamid/channels/ids endpoint. An attacker can access sensitive channel metadata by sending...
EUVD-2018-13767
Malware in sbrugna...
EUVD-2018-13777
Malware in sbrugna...
EUVD-2017-9995
Malware in sbrugna...
EUVD-2020-6597
Malware in sbrugna...
EUVD-2020-6585
Malware in sbrugna...
EUVD-2020-6588
Malware in sbrugna...
EUVD-2016-2056
Malware in sbrugna...
EUVD-2016-2051
Malware in sbrugna...
EUVD-2017-9979
Malware in sbrugna...
EUVD-2019-11427
Malware in sbrugna...
EUVD-2018-13772
Malware in sbrugna...
EUVD-2016-2064
Malware in sbrugna...
EUVD-2018-13764
Malware in sbrugna...
EUVD-2017-10007
Malware in sbrugna...