Vendor
Mattermost
512 known vulnerabilities.
Products
Mattermost 480
Mattermost Confluence Plugin 14
Mattermost Desktop 3
Mattermost Boards 2
Focalboard 2
Mattermost App Framework 2
Mattermost Playbooks 2
Mattermost Plugins 1
github.com/mattermost/mattermost/server/public 1
Mattermost iOS app 1
Playbooks Plugin 1
Mattermost Mobile 1
Mattermost Google Drive Plugin 1
Mattermost Github Plugin 1
Mattermost < 7.8.12 0
Mattermost < 9.0.1 0
Mattermost < 8.0.4 0
Mattermost < 8.1.3 0
Mattermost < 7.1.9 0
Mattermost < 7.8.4 0
Mattermost < 7.9.3 0
Mattermost < 7.10.0 0
Mattermost Desktop App < 5.3.0 0
Mattermost < v7.8.5 0
Mattermost < v7.10.1 0
Mattermost < v7.9.4 0
Mattermost < v7.8.7 0
Mattermost < 7.9.5 0
Mattermost < 7.10.3 0
Mattermost Mobile Apps < 2.5.1 0
Mattermost < 7.7.2 0
Mattermost < 7.1.6 0
Mattermost < v8.1.5 0
Mattermost < 7.8.14 0
Mattermost Server < 7.5.2 0
Mattermost < 9.0.3 0
Mattermost Server < 7.4.1 0
Mattermost < v9.1.2 0
Mattermost Server < 7.1.5 0
Mattermost < 7.9.0 0
3 results · Clear filters · Feed
-
Medium 4.3CVE-2026-2461 Public exploit
Missing authorization check allows unauthorized modification of other users' comments on a board
Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor permission to modify comments created by other board members. Mattermost Advisor…
-
Critical 9.9
Arbitrary file read in Mattermost Boards via import & export board archive
Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate board blocks when importing boards which allows an attacker could read any arbitrary file on the system via importing and exporting a speciall…
-
Medium 4.9CVE-2023-5968 Public exploit
Password hash in response body after username update
Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body.