Mattermost Microsoft Teams Plugin fails to properly mask sensitive configuration values

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-2476 · ADVISORY
• mattermost/mattermost-plugin-msteams commit 036c761 · WEB
• mattermost/mattermost-plugin-msteams · PACKAGE
• mattermost.com/security-updates · WEB
• GitHub Advisory GHSA-4ppj-6chv-5pgc · ADVISORY

Lỗ hổng khác của github.com/mattermost/mattermost-plugin-msteams

• CVE-2026-24661TRUNG BÌNH 6.5Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated…
• CVE-2026-21388TRUNG BÌNH 6.5Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webhook endpoint which allows an authenticated…
• CVE-2025-27936TRUNG BÌNH 5.9Mattermost Plugin MSTeams versions <2.1.0 and Mattermost Server versions 10.5.x <=10.5.1 with the MS Teams plugin enabled fail to perform co…