github.com/mattermost/mattermost-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-18907Mediumgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to XSS through channel headers CVE-2017-18900Criticalgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable CSV Injection CVE-2017-18908Criticalgithub.com/mattermost/mattermost-server: Mattermost Server password reset email requests can be sent to attacker-provided email addresses CVE-2017-18901Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes private team invite ID CVE-2017-18905Mediumgithub.com/mattermost/mattermost-server: Mattermost Server has Insufficient Session Expiration when used as an OAuth 2.0 service provider CVE-2017-18903Highgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to CSRF if CORS is enabled CVE-2017-18904Mediumgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to XSS via an uploaded file CVE-2017-18906Highgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to user account takeover when Single Sign-On OAuth2 is used CVE-2017-18898Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to DoS through maliciously crafted posts CVE-2017-18891Mediumgithub.com/mattermost/mattermost-server: Mattermost Server does not safeguard against phishing via error page links CVE-2017-18888Criticalgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to SQL Injection when executing multiple POST requests CVE-2017-18895Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes sensitive user status information via REST API version 4 endpoint CVE-2017-18890Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows attackers to create buttons that can launch API requests CVE-2017-18896Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows attackers to log sensitive information via DEBUG REST API logging endpoint CVE-2017-18894Highgithub.com/mattermost/mattermost-server: Mattermost Server has intermittent Authorization bypass for resource-owners CVE-2017-18892Mediumgithub.com/mattermost/mattermost-server: Mattermost Server does not neutralize HTML content in an Email template field CVE-2017-18897Mediumgithub.com/mattermost/mattermost-server: Mattermost Server mishandles redirect denial action CVE-2017-18893Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through display name field CVE-2017-18885Criticalgithub.com/mattermost/mattermost-server: Mattermost Server allows attackers to gain privileges by accessing unintended API endpoints with…CVE-2017-18889Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to webhook and slash command manipulation CVE-2017-18884Criticalgithub.com/mattermost/mattermost-server: Mattermost Server exposes OAuth personal access tokens to attackers CVE-2017-18886Highgithub.com/mattermost/mattermost-server: Mattermost Server does not properly restrict use of slash commands CVE-2017-18887Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes team creator's e-mail address to other members CVE-2017-18877Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page CVE-2017-18875Mediumgithub.com/mattermost/mattermost-server: Mattermost Server does not prevent System Admin from arbitrary file creation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo