Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
added 2026/05/18 9:31 a.m.25 views

Mattermost doesn't sanitize sensitive configuration fields in the Mattermost Calls plugin

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows an attacker with access to a support packet to obtain TURN server credentials via the plaintext values present in the exported plugi...

7.6CVSS5.8AI score0.00266EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder