github.com/mattermost/mattermost-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-1777Mediumgithub.com/mattermost/mattermost-server/v6: Mattermost vulnerable to information disclosure CVE-2022-4045Mediumgithub.com/mattermost/mattermost-server: Denial of service in Mattermost CVE-2022-4044Mediumgithub.com/mattermost/mattermost-server: Denial of service in Mattermost CVE-2022-1982Mediumgithub.com/mattermost/mattermost-server: Uncontrolled Resource Consumption in Mattermost server CVE-2018-21258Highgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command CVE-2017-18917Highgithub.com/mattermost/mattermost-server: Mattermost Server uses weak hashing for OAuth, email verification tokens and invitations CVE-2017-18915Criticalgithub.com/mattermost/mattermost-server: Mattermost Server server restarts may provide attackers with API access CVE-2017-18918Mediumgithub.com/mattermost/mattermost-server: Mattermost Server does not restrict SAML certificate path for System Administrators CVE-2017-18916Mediumgithub.com/mattermost/mattermost-server: Mattermost Server has Improper Authorization for Integration Requests CVE-2017-18911Criticalgithub.com/mattermost/mattermost-server: Mattermost Server has X.509 Improper Certificate Validation CVE-2017-18912Highgithub.com/mattermost/mattermost-server: Mattermost Server allows an attacker to specify a full pathname of a log file CVE-2017-18909Highgithub.com/mattermost/mattermost-server: Mattermost Server SAML implementation does not require encryption or signature verification as default CVE-2017-18902Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes team invite IDs through API endpoints CVE-2017-18907Mediumgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to XSS through channel headers CVE-2017-18900Criticalgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable CSV Injection CVE-2017-18908Criticalgithub.com/mattermost/mattermost-server: Mattermost Server password reset email requests can be sent to attacker-provided email addresses CVE-2017-18901Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes private team invite ID CVE-2017-18905Mediumgithub.com/mattermost/mattermost-server: Mattermost Server has Insufficient Session Expiration when used as an OAuth 2.0 service provider CVE-2017-18903Highgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to CSRF if CORS is enabled CVE-2017-18904Mediumgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to XSS via an uploaded file CVE-2017-18906Highgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to user account takeover when Single Sign-On OAuth2 is used CVE-2017-18898Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to DoS through maliciously crafted posts CVE-2017-18891Mediumgithub.com/mattermost/mattermost-server: Mattermost Server does not safeguard against phishing via error page links CVE-2017-18888Criticalgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to SQL Injection when executing multiple POST requests CVE-2017-18895Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes sensitive user status information via REST API version 4 endpoint

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo