Tra cứu CVE

Mọi CVE đã công bố cùng các advisory mã nguồn mở (NVD, OSV, GitHub), kèm CVSS, EPSS và cho biết lỗ hổng có đang bị khai thác thực tế hay không (CISA KEV). Cập nhật mỗi vài giờ. Các bài quét đối chiếu dữ liệu này với công nghệ phát hiện được trên site.

403.291 lỗ hổng · 1.767 đang bị khai thác (CISA KEV)

github.com/mattermost/mattermost-server ✕Xoá bộ lọc

296 kết quả

Mã	Mức độ	Mô tả	Công bố
CVE-2017-18886	CAO8.8	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows a bypass of restrictions on use of slash commands.	19/06/2020
CVE-2017-18885	NGHIÊM TRỌNG9.8	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by accessing unintended API endpoints on a user's behalf.	19/06/2020
CVE-2017-18884	CAO8.1	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by using a registered OAuth application with personal access tokens.	19/06/2020
CVE-2017-18883	NGHIÊM TRỌNG9.1	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data.	19/06/2020
CVE-2017-18879	TRUNG BÌNH6.1	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the author_link field of a Slack attachment.	19/06/2020
CVE-2017-18878	TRUNG BÌNH4.3	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. Knowledge of a session ID allows revoking another user's session.	19/06/2020
CVE-2017-18874	TRUNG BÌNH6.5	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal.	19/06/2020
CVE-2017-18873	TRUNG BÌNH5.3	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to cause a denial of service (channel invisibility) via a misformatted post.	19/06/2020
CVE-2017-18872	TRUNG BÌNH4.3	An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider.	19/06/2020
CVE-2018-21258	CAO7.5	An issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of service via the invite_people slash command.	19/06/2020
CVE-2017-18877	TRUNG BÌNH6.1	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page.	19/06/2020
CVE-2017-18876	TRUNG BÌNH4.9	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of an arbitrary file.	19/06/2020
CVE-2017-18875	TRUNG BÌNH4.9	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files.	19/06/2020
CVE-2017-18871	CAO7.5	An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service (application crash) via an @ character before a JavaScript field name.	19/06/2020
CVE-2017-18870	TRUNG BÌNH4.3	An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case.	19/06/2020
CVE-2020-14457	TRUNG BÌNH5.3	An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the update_team WebSocket event, aka MMSA-2020-0012.	19/06/2020