Data exfiltration via AI plugin Jira tool

Denial of Service Via Malicious GIF

MFA Enforcement Bypass in Search APIs

Arbitrary file read via block duplication in Mattermost Boards

SQL Injection in Mattermost Boards via board category ID reordering

Insufficient Input Validation on Post Props

Insufficient Input Validation on Post Props

Insufficient Input Validation on Post Props

Insufficient Input Validation on Post Props

WebApp crash via improper validation of proto style in attachments

DoS via custom post type for sysconsole plugin readers

DoS via lack of type validation in Calls

DoS via non-string message using permalink embed

Insufficient Electron Fuses Configuration

Mobile password gets saved in dictionary under conditions

Munged email address used for password resets and notifications

Malicious remote can add users to arbitrary teams and channels

Spoofed push notifications from malicious server

Limited DoS due to permitting creating users with user-defined IDs

Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated…

Excessive resource consumption due to lack to request path size limits

Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker…

Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenticate the source of certain types of post actions, allowing…

DoS via a large number of User Preferences

Resource Exhaustion via the Invitation Feature

Excessive resource consumption when sending long emoji names in user custom status

Team associated AD/LDAP Groups Leaked due to missing authorization

Todo plugin gets crashed and disabled by member

Denial of Service via multiple identical User IDs in /api/v4/users/ids

DoS via Channel Notification Properties

Incorrect authorization allows a user manager to update a system admin

A guest user can perform various actions on public playbooks

Server crash via a specially crafted markdown input

Denial of Service while unescaping a Markdown string

Path traversal in GitHub plugin's code preview feature

Stack exhaustion in PreparePostForClientWithEmbedsAndImages

Ephemeral messages return private channel contents in permalink previews

Deactivated user can retain access using oauth2 api

Collapsed Reply Threads APIs leak message contents from private channels

Apps Framework allows install requests from regular members via an internal path

Unsanitized events sent over Websocket to regular users in a High Availability environment

IDOR: Updating a playbook via the Playbooks API

IDOR: Accessing playbook runs via the Playbooks Runs API

Authenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server

Authenticated user could send multiple requests containing a large Auto Responder Message payload and can crash a Mattermost server

Authenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server

Server-side Denial of Service while processing a specifically crafted GIF file

Server-side Denial of Service while processing a specifically crafted JPEG file

Malicious imports can lead to Denial of Service

Team members could access sensitive information of other users via an API call