CVE-2019-20885

An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file...

CVE-2019-20885

Mattermost Server prior to 5.8.0 may not consistently generate a robots.txt file. Affected product is Mattermost Server; the issue is that robots.txt generation is not guaranteed, but the exact root cause, affected versions beyond 5.8.0, potential impact, exploitation details, and remediations ar...

CVE-2019-20883

Mattermost Server vulnerable prior to version 5.8.0 when Town Square is set to Read-Only. An attacker could pin or unpin a post, as described in CVE-2019-20883. The issue affects Mattermost Server

CVE-2019-20883

An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin a post...

CVE-2019-20882

Mattermost Server before 5.8.0 does not honor the domain requirement when processing a join request for an open/public team. Root cause: domain validation in the join flow is insufficient, enabling potential unauthorized joining of public teams (exploit described in CNVD/DOCs). Affected version r...

CVE-2019-20882

An issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain requirement when processing a join request for an open team...

CVE-2019-20881

CVE-2019-20881 affects Mattermost Server prior to 5.8.0, where brute-force handling of MFA is mishandled. Root cause is improper handling of MFA brute-force attempts, allowing continued attempts that could weaken MFA effectiveness. Affects Mattermost Server versions before 5.8.0; CVSS base scores...

CVE-2019-20881

An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA...

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

CVE-2019-20880

Mattermost Server vulnerable to denial-of-service via OpenGraph handling. Affected versions: before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Root cause described as OpenGraph processing leading to memory consumption (DoS). No exploitation details or attacker vectors provided in the documents. No remediat...

CVE-2019-20878

Mattermost Server contains a vulnerability in how the application handles changes to email addresses, affecting Mattermost Server versions prior to 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The issue is described across multiple sources (Red Hat and CNVD records) with the same root cause: changes to email...

CVE-2019-20879

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e-mail addresses do not require credential re-entry...

CVE-2019-20878

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes, within the application, to e-mail addresses are mishandled...

CVE-2019-20879

CVE-2019-20879 affects Mattermost Server prior to 5.8.0, 5.7.2, 5.6.5, and 4.10.7. The issue allows changing a user’s email address without credential re-entry, indicating an authentication/authorization control flaw. Root cause details are not provided in the connected documents. No explicit exp...

CVE-2019-20877

Mattermost Server contains an information-disclosure vulnerability that allows an attacker to determine if a user has 2FA enabled. Affected versions include Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The issue is described consistently across CVE sources (including Red Hat), with n...

CVE-2019-20877

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information about whether someone has 2FA enabled...

CVE-2019-20876

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Users can deactivate themselves, bypassing a policy...

CVE-2019-20876

Mattermost Server contains a vulnerability disclosed as CVE-2019-20876 affecting versions prior to 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The issue allows a user to deactivate themselves, bypassing a policy. Public-connected sources (e.g., Red Hat, CNVD, NVD entries) reiterate this description without ...

CVE-2019-20875

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows a password reset to proceed while an e-mail address is being changed...

CVE-2019-20875

Mattermost Server vulnerable versions prior to 5.9.0, 5.8.1, 5.7.3, and 4.10.8 allow a password reset to proceed while an email address is being changed. Nexus of the issue is not detailed in the provided documents beyond this description. Affected component is the password reset flow; root cause...