github.com/mattermost/mattermost-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-18890Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows attackers to create buttons that can launch API requests CVE-2017-18896Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows attackers to log sensitive information via DEBUG REST API logging endpoint CVE-2017-18894Highgithub.com/mattermost/mattermost-server: Mattermost Server has intermittent Authorization bypass for resource-owners CVE-2017-18892Mediumgithub.com/mattermost/mattermost-server: Mattermost Server does not neutralize HTML content in an Email template field CVE-2017-18897Mediumgithub.com/mattermost/mattermost-server: Mattermost Server mishandles redirect denial action CVE-2017-18893Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through display name field CVE-2017-18885Criticalgithub.com/mattermost/mattermost-server: Mattermost Server allows attackers to gain privileges by accessing unintended API endpoints with users' credentials CVE-2017-18889Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to webhook and slash command manipulation CVE-2017-18884Criticalgithub.com/mattermost/mattermost-server: Mattermost Server exposes OAuth personal access tokens to attackers CVE-2017-18886Highgithub.com/mattermost/mattermost-server: Mattermost Server does not properly restrict use of slash commands CVE-2017-18887Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes team creator's e-mail address to other members CVE-2017-18877Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page CVE-2017-18875Mediumgithub.com/mattermost/mattermost-server: Mattermost Server does not prevent System Admin from arbitrary file creation CVE-2017-18876Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to Path Traversal when files are stored locally CVE-2017-18883Mediumgithub.com/mattermost/mattermost-server: Mattermost Server has low entropy for authorization data as an OAuth 2.0 Service Provider CVE-2017-18879Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through author_link field in Slack attachments CVE-2017-18878Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows users with a session ID to revoke another users' session CVE-2017-18873Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to channel invisibility DoS via misformatted post CVE-2017-18870Mediumgithub.com/mattermost/mattermost-server: Mattermost Server has mishandled webhook access control CVE-2016-11081Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes information stored by a web browser CVE-2017-18871Highgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to Denial of Service through `@` character prefix inserted into JavaScript field names CVE-2016-11084Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows XSS via CSRF CVE-2016-11079Mediumgithub.com/mattermost/mattermost-server: Mattermost Server allows XSS via redirect URL CVE-2017-18872Mediumgithub.com/mattermost/mattermost-server: Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization CVE-2016-11080Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes account details to any Team Administrator

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo