Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Mattermost_server
(Mattermost)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 215 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2020-06-19 | CVE-2019-20875 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows a password reset to proceed while an e-mail address is being changed. | Mattermost_server | 5.3 | ||
| 2020-06-19 | CVE-2019-20876 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Users can deactivate themselves, bypassing a policy. | Mattermost_server | 5.4 | ||
| 2020-06-19 | CVE-2019-20877 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information about whether someone has 2FA enabled. | Mattermost_server | 5.3 | ||
| 2020-06-19 | CVE-2019-20878 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes, within the application, to e-mail addresses are mishandled. | Mattermost_server | 4.3 | ||
| 2020-06-19 | CVE-2019-20879 | An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e-mail addresses do not require credential re-entry. | Mattermost_server | 4.3 | ||
| 2020-06-19 | CVE-2019-20880 | An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service (memory consumption) via OpenGraph. | Mattermost_server | 7.5 | ||
| 2020-06-19 | CVE-2019-20881 | An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA. | Mattermost_server | 7.3 | ||
| 2020-06-19 | CVE-2019-20883 | An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin a post. | Mattermost_server | 4.3 | ||
| 2020-06-19 | CVE-2019-20884 | An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post. | Mattermost_server | 5.3 | ||
| 2020-06-19 | CVE-2019-20885 | An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file. | Mattermost_server | 7.5 |