CVE-2022-1002

Mô tả

Tham khảo

• hackerone.com/reports/1443567 · Exploit
• mattermost.com/security-updates · Release Notes

Lỗ hổng khác của mattermost

• CVE-2026-24661TRUNG BÌNH 6.5Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated…
• CVE-2024-10214THẤP 3.5Mattermost versions 9.11.X <= 9.11.1, 9.5.x <= 9.5.9 icorrectly issues two sessions when using desktop SSO - one in the browser and one in d…
• CVE-2024-8071CAO 7.2Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to restrict which roles can promote a user as s…
• CVE-2024-43813TRUNG BÌNH 4.3Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to enforce proper access controls which allows any authenticated user, including g…
• CVE-2024-42411TRUNG BÌNH 5.3Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to restrict the input in POST /api/v4/users which …