CVE-2020-14457

An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the updateteam WebSocket event, aka MMSA-2020-0012...

PT-2020-14017 · Mattermost · Mattermost Server

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 5.20.0 Description: An issue was discovered in Mattermost Server where non-members can receive broadcasted team details via the update team WebSocket event. Recommendations: For versions prior to 5.20.0,...

PT-2020-10810

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.18.0 Description An issue allows an attacker to send a user typing WebSocket event to any channel. Recommendations For versions prior to 5.18.0, update to version 5.18.0 or later to resolve the issue...