github.com/mattermost/mattermost-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-18876Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to Path Traversal when files are stored locally CVE-2017-18883Mediumgithub.com/mattermost/mattermost-server: Mattermost Server has low entropy for authorization data as an OAuth 2.0 Service Provider CVE-2017-18879Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through author_link field in Slack attachments CVE-2017-18878Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows users with a session ID to revoke another users' session CVE-2017-18873Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to channel invisibility DoS via misformatted post CVE-2017-18870Mediumgithub.com/mattermost/mattermost-server: Mattermost Server has mishandled webhook access control CVE-2016-11081Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes information stored by a web browser CVE-2017-18871Highgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to Denial of Service through `@` character prefix inserted into…CVE-2016-11084Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows XSS via CSRF CVE-2016-11079Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows XSS via redirect URL CVE-2017-18872Mediumgithub.com/mattermost/mattermost-server: Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization CVE-2016-11080Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes account details to any Team Administrator CVE-2017-18874Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to Directory Traversal by System Admins CVE-2016-11082Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through crafted links CVE-2016-11083Mediumgithub.com/mattermost/mattermost-server: Mattermost Server: Files may be rendered inline instead of downloaded, allowing script execution CVE-2016-11077Lowgithub.com/mattermost/mattermost-server: Mattermost Server allows System Admin to modify LDAP account names and email addresses CVE-2016-11075Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes sensitive information about team URLs via an API CVE-2016-11067Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to Uncontrolled Resource Consumption CVE-2016-11074Highgithub.com/mattermost/mattermost-server: Mattermost Server: Insufficient Password-Reset Link Invalidation CVE-2016-11076Highgithub.com/mattermost/mattermost-server: Mattermost Server does not check if cookies are used over SSL CVE-2016-11071Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through lack of link relationship attributes `noreferrer`…CVE-2016-11069Highgithub.com/mattermost/mattermost-server: Mattermost Server does not enforce rate limits on password change attempts CVE-2016-11068Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to Code Injection through its LDAP fields CVE-2016-11066Highgithub.com/mattermost/mattermost-server: Mattermost Server: initial_load API exposes unnecessary information CVE-2016-11072Mediumgithub.com/mattermost/mattermost-server: Mattermost Server's Session ID and Session Token are potentially compromised

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo