1648 matches found
Mattermost Server 安全漏洞
Mattermost Server is an open source messaging platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost Server versions 8.1.x through prior to 8.1.11 that stems from incorrect access control...
Mattermost Server 安全漏洞
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A denial of service vulnerability exists in Mattermost Server that stems from an unrestricted number of user preferences, which can be exploited by an attacker to cause a denial of service...
PT-2024-19090 · Mattermost · Mattermost Server
Name of the Vulnerable Software and Affected Versions: Mattermost Server versions 8.1.x before 8.1.11 Description: The issue is related to improper access control, allowing an attacker to continue participating in a call even after being removed from the channel. This occurs when the attacker is ...
Improper Authentication
github.com/mattermost/mattermost-server is vulnerable to Improper Authentication. The vulnerability is due to improper verification of account ownership when switching from email to SAML authentication. This flaw allowing an authenticated attacker to take over other user accounts via a crafted...
Cross-Site Scripting
github.com/mattermost/mattermost-server is vulnerable to Cross-Site Scripting. The vulnerability is due to improper escaping of user-controlled outputs when generating HTML pages. This flaw allows an attacker to execute scripts in the context of another user's browser session...
Denial Of Service (DoS)
github.com/mattermost/mattermost-server is vulnerable to Denial of Service DoS. The vulnerability due to there is no proper validation or check on the length when setting the title in a run checklist in Playbooks. An attacker can send a specially crafted request and potentially leads to crash of...
Mattermost Server Resource Exhaustion
Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...
GHSA-QQC8-RV37-79Q5 Mattermost Server Resource Exhaustion
Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...
CVE-2024-2445 Reflected XSS in Mattermost Jira plugin
Mattermost Jira plugin versions shipped with Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to escape user-controlled outputs when generating HTML pages, which allows an attacker to perform reflected cross-site scripting attacks agains...
CVE-2024-28053
Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...
CVE-2024-28053 Resource Exhaustion via the Invitation Feature
Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...
CVE-2024-28053 Resource Exhaustion via the Invitation Feature
Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...
CVE-2024-28053
CVE-2024-28053 – Mattermost Server : A resource-exhaustion flaw in Mattermost Server 8.1.x prior to 8.1.10 allows an attacker to read/parse an email payload without limiting its size, enabling a very large payload to crash the server. Affected are Mattermost Server 8.1.x versions before 8.1.10. T...
CVE-2024-28053 Resource Exhaustion via the Invitation Feature
Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...
PT-2024-22239 · Mattermost · Mattermost Server
Name of the Vulnerable Software and Affected Versions: Mattermost Server versions 8.1.x before 8.1.10 Description: The issue is related to resource exhaustion, where the server fails to limit the size of the payload that can be read and parsed, allowing an attacker to send a very large email...
Mattermost 安全漏洞
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A denial of service vulnerability exists in Mattermost Server, which can be exploited by an attacker to cause the server to crash...
Mattermost Server Denial of Service Vulnerability (CNVD-2024-26110)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A denial of service vulnerability exists in Mattermost Server, which can be exploited by an attacker to cause the server to crash...
Mattermost Server 5.34.x < 7.1.9 / 7.2.x < 7.8.4 / 7.9.x < 7.9.3 / 7.10.0 (MMSA-2023-00159)
The version of Mattermost Server installed on the remote host is prior to 7.1.9, 7.8.4, or 7.9.3 / 7.10.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2023-00159 advisory. - Mattermost fails to normalize UTF confusable characters when determining if a preview should be...