Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Mattermost_server
(Mattermost)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 206 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2020-06-19 | CVE-2019-20881 | An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA. | Mattermost_server | 7.3 | ||
2020-06-19 | CVE-2019-20883 | An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin a post. | Mattermost_server | 4.3 | ||
2020-06-19 | CVE-2019-20884 | An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post. | Mattermost_server | 5.3 | ||
2020-06-19 | CVE-2019-20885 | An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file. | Mattermost_server | 7.5 | ||
2020-06-19 | CVE-2019-20887 | An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts. | Mattermost_server | 4.3 | ||
2020-06-19 | CVE-2019-20890 | An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions. | Mattermost_server | 4.3 | ||
2020-06-19 | CVE-2019-20841 | An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks. | Mattermost_server | 8.8 | ||
2020-06-19 | CVE-2017-18883 | An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data. | Mattermost_server | N/A | ||
2020-06-19 | CVE-2018-21264 | An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. It did not enforce the expiration date of a SAML response. | Mattermost_server | N/A | ||
2020-06-19 | CVE-2018-21261 | An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team invite_id, which leads to unintended excessive invitation privileges. | Mattermost_server | N/A |