Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Mattermost_server
(Mattermost)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 238 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2020-06-19 | CVE-2019-20878 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes, within the application, to e-mail addresses are mishandled. | Mattermost_server | 4.3 | ||
| 2020-06-19 | CVE-2019-20879 | An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e-mail addresses do not require credential re-entry. | Mattermost_server | 4.3 | ||
| 2020-06-19 | CVE-2019-20880 | An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service (memory consumption) via OpenGraph. | Mattermost_server | 7.5 | ||
| 2020-06-19 | CVE-2019-20881 | An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA. | Mattermost_server | 7.3 | ||
| 2020-06-19 | CVE-2019-20883 | An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin a post. | Mattermost_server | 4.3 | ||
| 2020-06-19 | CVE-2019-20884 | An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post. | Mattermost_server | 5.3 | ||
| 2020-06-19 | CVE-2019-20885 | An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file. | Mattermost_server | 7.5 | ||
| 2020-06-19 | CVE-2019-20887 | An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts. | Mattermost_server | 4.3 | ||
| 2020-06-19 | CVE-2019-20890 | An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions. | Mattermost_server | 4.3 | ||
| 2020-06-19 | CVE-2019-20841 | An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks. | Mattermost_server | 8.8 |