BIT-MATTERMOST-2020-14452

An issue was discovered in Mattermost Server before 5.21.0. mmctl allows directory traversal via HTTP, aka MMSA-2020-0014...

BIT-MATTERMOST-2020-14453

An issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not appropriately restricted, which allows attackers to cause a denial of service, aka MMSA-2020-0005...

BIT-MATTERMOST-2020-14457

An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the updateteam WebSocket event, aka MMSA-2020-0012...

BIT-MATTERMOST-2022-0903

A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body...

BIT-MATTERMOST-2022-0904

A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document...

Race Condition

github.com/mattermost/mattermost-server is vulnerable to a race condition. The vulnerability is due to a failure in handling concurrent requests of post creation and post deletion. An authenticated attacker can exploit this to gain an unauthorized access to individual post's contents via carefull...

Denial Of Service (DOS)

github.com/mattermost/mattermost-server is vulnerable to a Denial of Service DoS. The vulnerability is due to improper validation of the length of the emoji value in the custom user status, allowing an attacker to send a very long string as an emoji value multiple times, causing high resource...

Mattermost Server < 8.1.8 / 9.x < 9.1.5 / 9.2.x < 9.2.4 (MMSA-2023-00276)

The version of Mattermost Server installed on the remote host is prior to 8.1.8, 9.x prior to 9.1.5 or 9.2.x prior to 9.2.4. It is, therefore, affected by a vulnerability as referenced in the MMSA-2023-00276 advisory. - Mattermost fails to check if a custom emoji reaction exists when sending it t...

CVE-2023-48369 Log Flooding due to specially crafted requests in different endpoints

Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow the log...

Mattermost Server < 7.8.12 / 8.0.x < 8.0.4 / 8.1.x < 8.1.3 / 9.0.0 Multiple Vulnerabilities (MMSA-2023-00240) (MMSA-2023-00242) (MMSA-2023-00246)

The version of Mattermost Server running on the remote host is prior to 7.8.12, 8.0.x prior to 8.0.3, 8.1.x prior to 8.1.3 or 9.0.0. It is, therefore, affected by multiple vulnerabilities: - Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request...

Mattermost Server < 7.8.13 / 8.x < 8.1.4 / 9.0.x < 9.0.2 / 9.1.0 Multiple Vulnerabilities

The version of Mattermost Server running on the remote host is prior to 7.8.13, 8.x prior to 8.1.4, 9.0.x prior to 9.0.2 or 9.1.x prior to 9.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the MMSA-2023-00218, MMSA-2023-00219, MMSA-2023-00233, MMSA-2023-00241,...

Mattermost Server < 7.8.10 / 8.x < 8.1.1 Incorrect Authorization (MMSA-2023-00223)

The version of Mattermost Server running on the remote host is prior to 7.8.10 or 8.x prior to 8.1.1. It is, therefore, affected by an incorrect authorization vulnerability. Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager ...

Mattermost Server < 7.8.5 / 7.9.x < 7.9.4 Improper Authorization (MMSA-2023-00157)

The version of Mattermost Server running on the remote host is prior to 7.8.5 or 7.9.x prior to 7.9.4. It is, therefore, affected by an improper authorization vulnerability. Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessi...

Mattermost Server < 7.8.8 / 7.9.x < 7.9.6 / 7.10.x < 7.10.4 Multiple Vulnerabilities

The version of Mattermost Server running on the remote host is prior to 7.8.8, 7.9.x prior to 7.9.6 or 7.10.x prior to 7.10.4. It is, therefore, affected by multiple vulnerabilities: - Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged...

Information Disclosure

github.com/mattermost/mattermost-server is vulnerable to Information Disclosure. The vulnerability exists due to the lack of restricting the post metadata during audit logging, which allows an attacker to gain sensitive information through the permalink contents in logs...

Improper Access Control

github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability exists because the library fails to delete the attachments when deleting messages in a thread, allowing a user to access and download the attachment of a deleted message...

Mattermost Server < 7.8.5 / 7.9.x < 7.9.4 / 7.10.x < 7.10.1 Missing Authorization (MMSA-2023-00151)

The version of Mattermost Server running on the remote host is prior to 7.8.5, 7.9.x prior to 7.9.4 or 7.10.x prior to 7.10.1. It is, therefore, affected by a missing authorization vulnerability. Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request...

Mattermost Server Detection Consolidation

Consolidation of Mattermost Server detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to Denial Of Service DoS. The vulnerability exists because the library fails to properly truncate the Postgres error log message of a search query failure, allowing an attacker to crash the application by repeatedly providing maliciously craft...

Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to Denial Of Service DoS. The vulnerability exists because the Unescape function of inlines.go does not efficiently process Markdown strings, allowing an attacker to cause an application crash by sending a direct message containing a large...