Mattermost vulnerabilities
512 CVEs and advisories name Mattermost as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-3584Member can create team with team override scheme
- CVE-2023-3582Lack of channel membership check when linking a board to a channel
- CVE-2023-3581WebSockets accept connections from HTTPS origin
- CVE-2023-3577Limited blind SSRF to localhost/intranet in interactive dialog implementation
- CVE-2023-2785Specially crafted search query can cause large log entries in postgres
- CVE-2023-2831Denial of Service while unescaping a Markdown string
- CVE-2023-2797Path traversal in GitHub plugin's code preview feature
- CVE-2023-2793Stack exhaustion in PreparePostForClientWithEmbedsAndImages
- CVE-2023-2792Ephemeral messages return private channel contents in permalink previews
- CVE-2023-2791Playbooks lets you edit arbitrary posts
- CVE-2023-2788Deactivated user can retain access using oauth2 api
- CVE-2023-2787Collapsed Reply Threads APIs leak message contents from private channels
- CVE-2023-2786Channel commands execution doesn't properly verify permissions
- CVE-2023-2784Apps Framework allows install requests from regular members via an internal path
- CVE-2023-2783App Framework does not checks for the secret provided in the incoming webhook request
- CVE-2023-2808Lack of URL normalization allows rendering previews for disallowed domains
- CVE-2023-2514DB username/password revealed in application logs
- CVE-2023-2515Privilege escalation to system admin via personal access tokens
- CVE-2023-2000Unrestricted navigation due to unvalidated mattermost server redirection
- CVE-2023-2281Archiving a team broadcasts unsanitized data over WebSockets
- CVE-2023-2193Oauth authorization codes do not expire when deauthorizing an oauth2 app
- CVE-2023-1831User password logged in audit logs
- CVE-2023-1777Information disclosure in linked message previews
- CVE-2023-1776Stored XSS via SVG attachment on Boards
- CVE-2023-1775Unsanitized events sent over Websocket to regular users in a High Availability environment
- CVE-2023-1774Unauthorized email invite to a private channel
- CVE-2023-1562Full name revealed via /plugins/focalboard/api/v2/users
- CVE-2023-1421Reflected XSS in OAuth flow completion endpoints
- CVE-2023-27266Disclosure of team owner email address when when accessing the teams API
- CVE-2023-27265Disclosure of team owner email address when regenerating Invite ID