CVE-2019-20855

Mattermost Server contains an information disclosure flaw in legacy attachment migration affecting versions before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. The issue allows an attacker to obtain sensitive local files due to improper handling during migration. The connected documents confirm the affecte...

CVE-2019-20854

An issue was discovered in Mattermost Server before 5.17.0. It allows remote attackers to cause a denial of service client-side application crash via a LaTeX message...

CVE-2019-20854

Mattermost Server before 5.17.0 is affected. The issue allows remote attackers to cause a denial-of-service by sending a LaTeX message, triggering a client-side crash. Root cause details are not explicitly described in the provided documents. Exploitation status is not detailed. No remediation or...

CVE-2019-20853

An issue was discovered in Mattermost Packages before 5.16.3. A Droplet could allow Internet access to a service that has a remote code execution problem...

CVE-2019-20853

CVE-2019-20853 affects Mattermost Packages before 5.16.3. A Droplet could expose an Internet-accessible service with a remote code execution vulnerability. Vendors in connected docs confirm Mattermost Packages prior to 5.16.3 are vulnerable; remediation is to upgrade to 5.16.3 or later. Impacts i...

CVE-2019-20852

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for sensitive information e.g., server addresses or message content...

CVE-2019-20852

Mattermost Mobile Apps prior to version 1.26.0 contain a local-logging issue where sensitive information (e.g., server addresses or message content) is not blocked from being written to device logs. The Red Hat/CVE entries confirm this description. Impact is stated as exposure of sensitive data t...

CVE-2019-20851

Mattermost Mobile Apps (before 1.26.0) is affected by a path traversal vulnerability via the Video Preview feature that can overwrite arbitrary files on a device. This is corroborated by multiple sources (NVD, Red Hat CVE page, CNVD, PRION, etc.). Root cause: directory traversal in the Video Prev...

CVE-2019-20851

An issue was discovered in Mattermost Mobile Apps before 1.26.0. An attacker can use directory traversal with the Video Preview feature to overwrite arbitrary files on a device...

CVE-2019-20850

Mattermost Mobile Apps before version 1.26.0 have a vulnerability where a view cache can persist on a device after logout. Affected product: Mattermost Mobile Apps. The provided documents do not detail the root cause, exploitability, or concrete impact beyond cache persistence. No remediation ste...

CVE-2019-20850

An issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a device after a logout...

CVE-2019-20849

An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout...

CVE-2019-20849

Mattermost Mobile Apps prior to version 1.26.0 have a cookie-clearing issue: cookie data can persist on the device after logout. Root cause indicated across sources is failure to clear cookies on logout, enabling possible exposure of prior session data. Impact aligns with partial confidentiality ...

CVE-2019-20848

Mattermost Mobile Apps

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

CVE-2019-20847

An issue was discovered in Mattermost Server before 5.18.0. An attacker can send a usertyping WebSocket event to any channel...

CVE-2019-20847

Mattermost Server prior to version 5.18.0 is affected. A vulnerability allows an attacker to send a user_typing WebSocket event to any channel, indicating improper handling of WebSocket events. The issue is documented across multiple feeds (e.g., Red Hat advisory, CNVD) and is mitigated by updati...

CVE-2019-20846

An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage...

CVE-2019-20846

CVE-2019-20846 affects Mattermost Server before 5.18.0, with weak permissions for server-local file storage. The issue is described across multiple sources (NVD, Red Hat, OSV, CNVD) as a vulnerability with network access and high impact on confidentiality (CVSSv3.1: 7.5; AV:N/AC:L/PR:N/UI:N/S:U/C...

CVE-2019-20845

Mattermost Server prior to version 5.18.0 contains a DoS vulnerability where a large Slack import can cause memory consumption. Affected product: Mattermost Server (before 5.18.0). Root cause: memory impact via processing oversized Slack imports. Impact: potential denial of service due to memory ...