Skip to content
OpenAdvisories

Archive

June 2020

Vulnerabilities first published in this month (UTC), newest first.

← May 2020 2020 / June July 2020 →
  1. 138
  2. 256
  3. 3127
  4. 4100
  5. 533
  6. 65
  7. 78
  8. 834
  9. 9222
  10. 1074
  11. 11123
  12. 1228
  13. 13 
  14. 143
  15. 1590
  16. 1653
  17. 1752
  18. 1884
  19. 19193
  20. 202
  21. 218
  22. 2280
  23. 2327
  24. 2466
  25. 2574
  26. 26104
  27. 272
  28. 283
  29. 2972
  30. 3052
All Critical High Medium Low Exploited only Public exploit

1,813 results · Feed

  • Medium 5.3
    CVE-2017-18896

    Mattermost Server allows attackers to log sensitive information via DEBUG REST API logging endpoint

    An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to add DEBUG lines to the logs via a REST API version 3 logging endpoint.

    github.com/mattermost/mattermost-server Go
  • Medium 6.1
    CVE-2017-18897

    Mattermost Server mishandles redirect denial action

    An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider. It mishandles a deny action for a redirection.

    github.com/mattermost/mattermost-server Go
  • Critical 9.8
    CVE-2017-18885

    Mattermost Server allows attackers to gain privileges by accessing unintended API endpoints with users' credentials

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by accessing unintended API endpoints on a user's behalf.

    github.com/mattermost/mattermost-server Go
  • Medium 5.3
    CVE-2017-18901

    Mattermost Server exposes private team invite ID

    An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover a team invite ID by requesting a JSON document.

    github.com/mattermost/mattermost-server Go
  • Medium 4.3
    CVE-2017-18889

    Mattermost Server is vulnerable to webhook and slash command manipulation

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API.

    github.com/mattermost/mattermost-server Go
  • Medium 4.3
    CVE-2017-18890

    Mattermost Server allows attackers to create buttons that can launch API requests

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows an attacker to create a button that, when pressed by a user, launches an API request.

    github.com/mattermost/mattermost-server Go
  • Medium 6.1
    CVE-2017-18892

    Mattermost Server does not neutralize HTML content in an Email template field

    An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. E-mail templates can have a field in which HTML content is not neutralized.

    github.com/mattermost/mattermost-server Go
  • Medium 6.1
    CVE-2017-18891

    Mattermost Server does not safeguard against phishing via error page links

    An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows Phishing because an error page can have a link.

    github.com/mattermost/mattermost-server Go
  • Critical —
    CVE-2017-18884

    Mattermost Server exposes OAuth personal access tokens to attackers

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by using a registered OAuth application with personal access tokens.

    github.com/mattermost/mattermost-server Go
  • Medium —
    CVE-2017-18883

    Mattermost Server has low entropy for authorization data as an OAuth 2.0 Service Provider

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data.

    github.com/mattermost/mattermost-server Go
  • Unscored —
    CVE-2017-18882

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data.

  • Unscored —
    CVE-2017-18881

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via a goto_location respon…

  • Medium 6.1
    CVE-2017-18879

    Mattermost Server is vulnerable to XSS through author_link field in Slack attachments

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the author_link field of a Slack attachment.

    github.com/mattermost/mattermost-server Go
  • Medium 4.3
    CVE-2017-18878

    Mattermost Server allows users with a session ID to revoke another users' session

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. Knowledge of a session ID allows revoking another user's session.

    github.com/mattermost/mattermost-server Go
  • Medium —
    CVE-2017-18874

    Mattermost Server is vulnerable to Directory Traversal by System Admins

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal.

    github.com/mattermost/mattermost-server Go
  • Medium 5.3
    CVE-2017-18873

    Mattermost Server is vulnerable to channel invisibility DoS via misformatted post

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to cause a denial of service (channel invisibility) via a misformatted post.

    github.com/mattermost/mattermost-server Go
  • Medium 4.3
    CVE-2017-18872

    Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization

    An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider.

    github.com/mattermost/mattermost-server Go
  • Unscored —
    CVE-2018-21252

    An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers could use multiple e-mail …

  • Unscored —
    CVE-2018-21256

    An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (fo…

  • Unscored —
    CVE-2018-21264

    An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. It did not enforce the expiration date of …

  • Unscored —
    CVE-2020-3972

    VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest Fi…

    macOS
  • Medium 6.3
    CVE-2020-13277 Public exploit

    An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and late…

    GitLab GitLab Web / CMS
  • Medium 6.5
    CVE-2020-8167

    CSRF Vulnerability in rails-ujs

    A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.

    rails rails actionview Debian Ubuntu RubyGems
  • Critical 9.8
    CVE-2020-8165 Public exploit EPSS 46%

    ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore

    A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.

    rails rails activesupport Debian Ubuntu RubyGems
  • High 7.5
    CVE-2020-8164

    Possible Strong Parameters Bypass in ActionPack

    A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.

    rails rails actionpack Debian Ubuntu RubyGems
  • Unscored —
    CVE-2020-14926

    CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page.

  • Unscored —
    CVE-2020-14927

    Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen.

  • High 7.5
    CVE-2020-8162 Public exploit

    Circumvention of file size limits in ActiveStorage

    A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.

    rails rails activestorage Debian Ubuntu RubyGems
  • Unscored —
    CVE-2018-21257

    An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (fo…

  • Unscored —
    CVE-2018-21261

    An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the…

  • Unscored —
    CVE-2018-21262

    An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service (applicatio…

  • Unscored —
    CVE-2018-21265

    An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionR…

  • High 7.5
    CVE-2017-18871

    Mattermost Server vulnerable to Denial of Service through `@` character prefix inserted into JavaScript field names

    An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service (application crash) via an @ character before a JavaScript field name.

    github.com/mattermost/mattermost-server Go
  • Unscored —
    CVE-2018-21250

    An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote attackers to cause a den…

  • Medium —
    CVE-2017-18877

    Mattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page.

    github.com/mattermost/mattermost-server Go
  • Medium —
    CVE-2017-18876

    Mattermost Server is vulnerable to Path Traversal when files are stored locally

    An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of an arbitrary file.

    github.com/mattermost/mattermost-server Go
  • Unscored —
    CVE-2018-21255

    An issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the Channel PATCH API to mo…

  • Unscored —
    CVE-2018-21254

    An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control (for direct-mes…

  • Unscored —
    CVE-2018-21260

    An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent du…

  • Unscored —
    CVE-2018-21251

    An issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be bypassed if the channel name …