github.com/mattermost/mattermost-server vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2017-18874Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to Directory Traversal by System AdminsCVE-2016-11082Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through crafted linksCVE-2016-11083Mediumgithub.com/mattermost/mattermost-server: Mattermost Server: Files may be rendered inline instead of downloaded, allowing script executionCVE-2016-11077Lowgithub.com/mattermost/mattermost-server: Mattermost Server allows System Admin to modify LDAP account names and email addressesCVE-2016-11075Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes sensitive information about team URLs via an APICVE-2016-11067Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to Uncontrolled Resource ConsumptionCVE-2016-11074Highgithub.com/mattermost/mattermost-server: Mattermost Server: Insufficient Password-Reset Link InvalidationCVE-2016-11076Highgithub.com/mattermost/mattermost-server: Mattermost Server does not check if cookies are used over SSLCVE-2016-11071Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through lack of link relationship attributes `noreferrer` and `noopener`CVE-2016-11069Highgithub.com/mattermost/mattermost-server: Mattermost Server does not enforce rate limits on password change attemptsCVE-2016-11068Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to Code Injection through its LDAP fieldsCVE-2016-11066Highgithub.com/mattermost/mattermost-server: Mattermost Server: initial_load API exposes unnecessary informationCVE-2016-11072Mediumgithub.com/mattermost/mattermost-server: Mattermost Server's Session ID and Session Token are potentially compromisedCVE-2016-11070Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS through customizable theme color-code valuesCVE-2016-11073Mediumgithub.com/mattermost/mattermost-server: Mattermost Server is vulnerable to XSS via a Legal or Support settingCVE-2016-11078Mediumgithub.com/mattermost/mattermost-server: Mattermost Server exposes sensitive information via its System Console UICVE-2016-11063Mediumgithub.com/mattermost/mattermost-server: Mattermost Server vulnerable to Cross-site Scripting through file preview feature

Stop the waste.
Protect your environment with Kodem.