CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enrolled server to mount a Denial Of Service.
|
| 02/11/2023 |
| CVE-2023-5875 | 中危5.3 | Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowing media exploitation from a malicious mattermost server | 02/11/2023 |
| CVE-2023-5339 | 中危5.5 | Mattermost Desktop fails to set an appropriate log level during initial run after fresh installation resulting in logging all keystrokes including password entry being logged.
| 17/10/2023 |
| CVE-2023-2000 | 中危5.4 | Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website
| 02/05/2023 |
| CVE-2016-11064 | 严重9.8 | An issue was discovered in Mattermost Desktop App before 3.4.0. Strings could be executed as code via injection. | 19/06/2020 |
| CVE-2018-21265 | 中危5.3 | An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler (e.g., video, audio, and notifications). | 19/06/2020 |
| CVE-2019-20861 | 高危8.8 | An issue was discovered in Mattermost Desktop App before 4.2.2. It allows attackers to execute arbitrary code via a crafted link. | 19/06/2020 |
| CVE-2019-20856 | 严重9.8 | An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection. | 19/06/2020 |
| CVE-2020-14456 | 高危7.3 | An issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is mishandled during access-control decisions for web APIs, aka MMSA-2020-0006. | 19/06/2020 |
| CVE-2020-14455 | 中危6.5 | An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, allowing phishing, aka MMSA-2020-0007. | 19/06/2020 |
| CVE-2020-14454 | 中危6.1 | An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandled, aka MMSA-2020-0008. | 19/06/2020 |