Skip to content
OpenAdvisories

Vendor

Mattermost

512 known vulnerabilities.

Products

Mattermost 480 Mattermost Confluence Plugin 14 Mattermost Desktop 3 Mattermost Boards 2 Focalboard 2 Mattermost App Framework 2 Mattermost Playbooks 2 Mattermost Plugins 1 github.com/mattermost/mattermost/server/public 1 Mattermost iOS app 1 Playbooks Plugin 1 Mattermost Mobile 1 Mattermost Google Drive Plugin 1 Mattermost Github Plugin 1 Mattermost < 7.8.12 0 Mattermost < 9.0.1 0 Mattermost < 8.0.4 0 Mattermost < 8.1.3 0 Mattermost < 7.1.9 0 Mattermost < 7.8.4 0 Mattermost < 7.9.3 0 Mattermost < 7.10.0 0 Mattermost Desktop App < 5.3.0 0 Mattermost < v7.8.5 0 Mattermost < v7.10.1 0 Mattermost < v7.9.4 0 Mattermost < v7.8.7 0 Mattermost < 7.9.5 0 Mattermost < 7.10.3 0 Mattermost Mobile Apps < 2.5.1 0 Mattermost < 7.7.2 0 Mattermost < 7.1.6 0 Mattermost < v8.1.5 0 Mattermost < 7.8.14 0 Mattermost Server < 7.5.2 0 Mattermost < 9.0.3 0 Mattermost Server < 7.4.1 0 Mattermost < v9.1.2 0 Mattermost Server < 7.1.5 0 Mattermost < 7.9.0 0
All Critical High Medium Low Exploited only Public exploit

42 results · Clear filters · Feed

  • High 7.1
    CVE-2023-27264

    IDOR: Updating a playbook via the Playbooks API

    A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.

    Mattermost Mattermost
  • High 7.1
    CVE-2021-37859

    Reflected XSS in OAuth Flow

    Fixed a bypass for a reflected cross-site scripting vulnerability affecting OAuth-enabled instances of Mattermost.

    Mattermost Mattermost