Security Advisories | GitStock

medium2022-05-24

CVE-2016-11084-Mattermost Server allows XSS via CSRF

mattermost/mattermost · GHSA-vw57-55f8-c73q

medium2022-05-24

CVE-2016-11083-Mattermost Server: Files may be rendered inline instead of downloaded, allowing script execution

mattermost/mattermost · GHSA-rm24-25xm-9454

low2022-05-24

CVE-2016-11077-Mattermost Server allows System Admin to modify LDAP account names and email addresses

mattermost/mattermost · GHSA-mj8v-773w-5qhj

medium2022-05-24

CVE-2016-11082-Mattermost Server is vulnerable to XSS through crafted links

mattermost/mattermost · GHSA-m78r-2x6w-qqjp

high2022-05-24

CVE-2017-18871-Mattermost Server vulnerable to Denial of Service through `@` character prefix inserted into JavaScript field names

mattermost/mattermost · GHSA-jc6w-8r7f-vmp5

medium2022-05-24

CVE-2017-18872-Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization

mattermost/mattermost · GHSA-hgrp-fgm8-56g8

medium2022-05-24

CVE-2016-11080-Mattermost Server exposes account details to any Team Administrator

mattermost/mattermost · GHSA-g3f3-p9rc-775p

medium2022-05-24

CVE-2017-18870-Mattermost Server has mishandled webhook access control

mattermost/mattermost · GHSA-9j9j-mm2r-9rfm

medium2022-05-24

CVE-2017-18874-Mattermost Server is vulnerable to Directory Traversal by System Admins

mattermost/mattermost · GHSA-8qg8-c7mw-6fj7

medium2022-05-24

CVE-2016-11081-Mattermost Server exposes information stored by a web browser

mattermost/mattermost · GHSA-5q37-9874-qxcw

high2022-05-24

CVE-2016-11066-Mattermost Server: initial_load API exposes unnecessary information

mattermost/mattermost · GHSA-r93j-3mmp-px57

high2022-05-24

CVE-2016-11069-Mattermost Server does not enforce rate limits on password change attempts

mattermost/mattermost · GHSA-qrf6-h5fc-7m96

medium2022-05-24

CVE-2016-11075-Mattermost Server exposes sensitive information about team URLs via an API

mattermost/mattermost · GHSA-q3g9-hgrx-hwhx

high2022-05-24

CVE-2016-11074-Mattermost Server: Insufficient Password-Reset Link Invalidation

mattermost/mattermost · GHSA-j26g-95ph-2mwv

medium2022-05-24

CVE-2016-11070-Mattermost Server is vulnerable to XSS through customizable theme color-code values

mattermost/mattermost · GHSA-h8qw-xqm9-q66j

medium2022-05-24

CVE-2016-11071-Mattermost Server is vulnerable to XSS through lack of link relationship attributes `noreferrer` and `noopener`

mattermost/mattermost · GHSA-h3qg-w9j5-wh3m

medium2022-05-24

CVE-2016-11067-Mattermost Server is vulnerable to Uncontrolled Resource Consumption

mattermost/mattermost · GHSA-ffcc-qr2v-3qmv

medium2022-05-24

CVE-2016-11078-Mattermost Server exposes sensitive information via its System Console UI

mattermost/mattermost · GHSA-9w4v-9c99-hv7r

medium2022-05-24

CVE-2016-11073-Mattermost Server is vulnerable to XSS via a Legal or Support setting

mattermost/mattermost · GHSA-9jrx-fgrm-96qh

medium2022-05-24

CVE-2016-11068-Mattermost Server is vulnerable to Code Injection through its LDAP fields

mattermost/mattermost · GHSA-7vmw-6c7h-rrrv