Mattermost Security Vulnerabilities
An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service (memory consumption) via a small compressed file that has a large size when uncompressed.
7.5CVSS
7.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.5.1. E-mail address verification can be bypassed.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.5.1. XSS can occur via file preview.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Desktop App before 3.4.0. Strings could be executed as code via injection.
9.8CVSS
9.6AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 3.3.0. An attacker could use the WebSocket feature to send pop-up messages to users or change a post's appearance.
4.3CVSS
4.5AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.2.0. The initial_load API disclosed unnecessary personal information.
7.5CVSS
7.5AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 3.2.0. It allowed crafted posts that could cause a web browser to hang.
5.3CVSS
5.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection.
5.3CVSS
5.5AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change.
7.5CVSS
7.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.1.0. It allows XSS via theme color-code values.
5.4CVSS
5.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled.
6.5CVSS
6.4AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting.
6.1CVSS
5.8AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused.
9.8CVSS
9.3AI Score
0.003EPSS
An issue was discovered in Mattermost Server before 3.0.0. It allows attackers to obtain sensitive information about team URLs via an API.
5.3CVSS
4.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.0.0. It does not ensure that a cookie is used over SSL.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account.
2.7CVSS
4AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.
6.5CVSS
6.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL.
6.1CVSS
5.8AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details.
4.3CVSS
4.5AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 2.2.0. It allows unintended access to information stored by a web browser.
4.3CVSS
4.4AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 2.2.0. It allows XSS via a crafted link.
6.1CVSS
5.8AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 2.2.0. It allows XSS because it configures files to be opened in a browser window.
6.1CVSS
5.8AI Score
0.001EPSS
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service (application crash) via an @ character before a JavaScript field name.
7.5CVSS
7.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to cause a denial of service (channel invisibility) via a misformatted post.
5.3CVSS
5.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal.
6.5CVSS
6.3AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files.
4.9CVSS
5.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of an arbitrary file.
4.9CVSS
5.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. Knowledge of a session ID allows revoking another user's session.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the author_link field of a Slack attachment.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the title_link field of a Slack attachment.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via a goto_location response to a slash command.
6.1CVSS
5.8AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data.
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data.
9.1CVSS
9.2AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by using a registered OAuth application with personal access tokens.
8.1CVSS
8.1AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by accessing unintended API endpoints on a user's behalf.
9.8CVSS
9.5AI Score
0.002EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows a bypass of restrictions on use of slash commands.
8.8CVSS
8.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It discloses the team creator's e-mail address to members.
5.3CVSS
5.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows SQL injection during the fetching of multiple posts.
9.8CVSS
9.8AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API.
4.3CVSS
4.6AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows an attacker to create a button that, when pressed by a user, launches an API request.
4.3CVSS
4.5AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows Phishing because an error page can have a link.
6.1CVSS
6.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. E-mail templates can have a field in which HTML content is not neutralized.
6.1CVSS
6.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. Display names allow XSS.
6.1CVSS
6.2AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. Sometimes. resource-owner authorization is bypassed, allowing account takeover.
8.1CVSS
8AI Score
0.001EPSS
An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to obtain sensitive information (user statuses) via a REST API version 4 endpoint.
5.3CVSS
4.9AI Score
0.001EPSS