Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2025/09/19 9:31 p.m.5 views

Mattermost Path Traversal vulnerability

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.1, 10.9.x = 10.9.3 fail to validate import directory path configuration which allows admin users to execute arbitrary code via malicious plugin upload to prepackaged plugins directory...

8CVSS8AI score0.00076EPSS
Exploits0References10Affected Software2
RedhatCVE
RedhatCVE
added 2025/08/23 7:28 a.m.3 views

CVE-2025-49810

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

4.3CVSS7AI score0.00045EPSS
Exploits0References1
OSV
OSV
added 2025/08/21 9:30 a.m.2 views

GHSA-PWVR-GRQG-7VP2 Mattermost Lack of Access Control Validation

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

3.5CVSS6.9AI score0.00045EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/08/21 9:30 a.m.9 views

Mattermost Does Not Sanitize the Team Invite ID

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fail to sanitize the team invite ID in the POST /api/v4/teams/:teamId/restore endpoint which allows an team admin with no member invite privileges to get the team’s invite id...

4.3CVSS7AI score0.0006EPSS
Exploits0References4Affected Software4
OpenVAS
OpenVAS
added 2017/04/18 12:0 a.m.25 views

Apple Mac OS X Multiple Vulnerabilities-03 (Apr 2017)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.4AI score0.02117EPSS
Exploits0References3
Rows per page
Query Builder