Security Advisories | GitStock

medium2022-05-24

CVE-2020-13961-Improper Input Validation in strapi

strapi/strapi · GHSA-65wv-528r-m892

high2022-05-24

CVE-2019-20891-WooCommerce Cross-Site Request Forgery (CSRF)

woocommerce/woocommerce · GHSA-rcmf-88p4-9wrg

high2022-05-24

CVE-2018-21258-Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command

mattermost/mattermost · GHSA-5mh6-p63g-3mv5

medium2022-05-24

CVE-2017-18916-Mattermost Server has Improper Authorization for Integration Requests

mattermost/mattermost · GHSA-x33g-375j-jhf7

critical2022-05-24

CVE-2017-18911-Mattermost Server has X.509 Improper Certificate Validation

mattermost/mattermost · GHSA-m462-mqw4-2c8m

high2022-05-24

CVE-2017-18912-Mattermost Server allows an attacker to specify a full pathname of a log file

mattermost/mattermost · GHSA-m2ch-x2q7-2284

high2022-05-24

CVE-2017-18917-Mattermost Server uses weak hashing for OAuth, email verification tokens and invitations

mattermost/mattermost · GHSA-jxc4-w54c-qv5r

critical2022-05-24

CVE-2017-18915-Mattermost Server server restarts may provide attackers with API access

mattermost/mattermost · GHSA-hxxj-8phw-74vw

medium2022-05-24

CVE-2017-18918-Mattermost Server does not restrict SAML certificate path for System Administrators

mattermost/mattermost · GHSA-5ghq-28r7-qwfj

high2022-05-24

CVE-2017-18909-Mattermost Server SAML implementation does not require encryption or signature verification as default

mattermost/mattermost · GHSA-r6j5-fqx9-7qv9

medium2022-05-24

CVE-2017-18902-Mattermost Server exposes team invite IDs through API endpoints

mattermost/mattermost · GHSA-jwfv-5hwq-f97r

medium2022-05-24

CVE-2017-18905-Mattermost Server has Insufficient Session Expiration when used as an OAuth 2.0 service provider

mattermost/mattermost · GHSA-g24c-fx4v-xg9w

high2022-05-24

CVE-2017-18906-Mattermost Server vulnerable to user account takeover when Single Sign-On OAuth2 is used

mattermost/mattermost · GHSA-fpcr-4rr5-hpcp

high2022-05-24

CVE-2017-18903-Mattermost Server vulnerable to CSRF if CORS is enabled

mattermost/mattermost · GHSA-fcwg-45jh-5qhf

medium2022-05-24

CVE-2017-18901-Mattermost Server exposes private team invite ID

mattermost/mattermost · GHSA-c253-8hr4-r8v9

critical2022-05-24

CVE-2017-18900-Mattermost Server is vulnerable CSV Injection

mattermost/mattermost · GHSA-8q4v-35v6-g8wr

medium2022-05-24

CVE-2017-18904- Mattermost Server vulnerable to XSS via an uploaded file

mattermost/mattermost · GHSA-8pff-p3gx-w4jf

medium2022-05-24

CVE-2017-18907-Mattermost Server vulnerable to XSS through channel headers

mattermost/mattermost · GHSA-42x9-rr3c-gr59

critical2022-05-24

CVE-2017-18908-Mattermost Server password reset email requests can be sent to attacker-provided email addresses

mattermost/mattermost · GHSA-34cx-hvm4-vx7j

medium2022-05-24

CVE-2017-18892-Mattermost Server does not neutralize HTML content in an Email template field

mattermost/mattermost · GHSA-wj5w-qghh-gvqp