İçeriğe atla
Noroxi

Mattermost kayıtları

mattermost üreticisine ait 641 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%56,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

641 kayıt
  • CVE-2019-20853
    40Planlayın

    An issue was discovered in Mattermost Packages before 5.16.3.

    KritikCVSS 9,8İstismar yokEPSS %2

    mattermost · mattermost packages19 Haz 2020

  • CVE-2019-20856
    39İzleyin

    An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost desktop19 Haz 2020

  • CVE-2017-18912
    39İzleyin

    An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2017-18900
    39İzleyin

    An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2016-11064
    39İzleyin

    An issue was discovered in Mattermost Desktop App before 3.4.0.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost desktop19 Haz 2020

  • CVE-2017-18920
    39İzleyin

    An issue was discovered in Mattermost Server before 3.6.2.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2018-21251
    39İzleyin

    An issue was discovered in Mattermost Server before 5.2 and 5.1.1.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2016-11074
    39İzleyin

    An issue was discovered in Mattermost Server before 3.0.0.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2017-18885
    39İzleyin

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2017-18908
    39İzleyin

    An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2017-18915
    39İzleyin

    An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2017-18888
    39İzleyin

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2025-4981
    39İzleyin

    Path Traversal Leading to RCE by Any Authenticated Mattermost User

    KritikCVSS 9,9İstismar yokEPSS %1

    mattermost · mattermost server20 Haz 2025

  • CVE-2023-6458
    39İzleyin

    Client side path traversal due to lack of route parameters validation

    KritikCVSS 9,8İstismar yokEPSS %1

    mattermost · mattermost server6 Ara 2023

  • CVE-2026-4858
    39İzleyin

    Path traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.

    KritikCVSS 9,9İstismar yokEPSS %0

    mattermost · mattermost server21 May 2026

  • CVE-2025-12421
    39İzleyin

    Account Takeover via Code Exchange Endpoint

    KritikCVSS 9,9İstismar yokEPSS %0

    mattermost · mattermost server27 Kas 2025

  • CVE-2025-12419
    39İzleyin

    Account takeover on OAuth/OpenID-enabled servers

    KritikCVSS 9,9İstismar yokEPSS %0

    mattermost · mattermost server27 Kas 2025

  • CVE-2024-39777
    38İzleyin

    Malicious remote can invite itself to an arbitrary local channel

    KritikCVSS 9,6İstismar yokEPSS %0

    mattermost · mattermost1 Ağu 2024

  • CVE-2025-25279
    37İzleyin

    Arbitrary file read in Mattermost Boards via import & export board archive

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    mattermost · mattermost server24 Şub 2025

  • CVE-2026-12985
    37İzleyin

    Mattermost DCR redirect URI allowlist bypass via improper URL component validation

    KritikCVSS 9,3İstismar yokEPSS %0

    mattermost · mattermost server14 Eyl 2026

  • CVE-2019-20851
    36İzleyin

    An issue was discovered in Mattermost Mobile Apps before 1.26.0.

    KritikCVSS 9,1İstismar yokEPSS %1

    mattermost · mattermost19 Haz 2020

  • CVE-2017-18883
    36İzleyin

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider.

    KritikCVSS 9,1İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2017-18911
    36İzleyin

    An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.

    KritikCVSS 9,1İstismar yokEPSS %1

    mattermost · mattermost server19 Haz 2020

  • CVE-2023-2193
    36İzleyin

    Oauth authorization codes do not expire when deauthorizing an oauth2 app

    KritikCVSS 9,1İstismar yokEPSS %1

    mattermost · mattermost20 Nis 2023

  • CVE-2019-20861
    35İzleyin

    An issue was discovered in Mattermost Desktop App before 4.2.2.

    YüksekCVSS 8,8İstismar yokEPSS %2

    mattermost · mattermost desktop19 Haz 2020