Mattermost Server Sensitive Data Exposure

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-14457 · ADVISORY
• mattermost/mattermost#13848 · WEB
• mattermost/mattermost · PACKAGE
• mattermost.com/security-updates · WEB
• mattermost.com/security-updates · Vendor Advisory
• GitHub Advisory GHSA-j2h2-cvwh-cr64 · ADVISORY

Lỗ hổng khác của github.com/mattermost/mattermost

• CVE-2025-13324THẤP 3.7Mattermost versions 10.11.x <= 10.11.5, 11.0.x <= 11.0.4, 10.12.x <= 10.12.2 fail to invalidate remote cluster invite tokens when using the …
• CVE-2025-62690TRUNG BÌNH 6.1Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a…
• CVE-2025-13352THẤP 3.0Mattermost versions 10.11.x <= 10.11.6 and Mattermost GitHub plugin versions <=2.4.0 fail to validate plugin bot identity in reaction forwar…
• CVE-2025-13870TRUNG BÌNH 4.3Mattermost versions 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate the user permission when accessing the files and subscribing to t…
• CVE-2025-12756TRUNG BÌNH 4.3Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate user permissions when delet…