Page 11 of 65 results (0.005 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage. Se detectó un problema en Mattermost Server versiones anteriores a 5.18.0. Presenta permisos débiles para el almacenamiento de archivos locales del servidor • https://mattermost.com/security-updates • CWE-281: Improper Preservation of Permissions •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service (memory consumption) via a large Slack import. Se detectó un problema en Mattermost Server versiones anteriores a 5.18.0. Permite a atacantes causar una denegación de servicio (consumo de la memoria) por medio de una importación Slack de gran tamaño • https://mattermost.com/security-updates • CWE-770: Allocation of Resources Without Limits or Throttling •

CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0

An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel. Se detectó un problema en Mattermost Server versiones anteriores a 5.18.0, 5.17.2, 5.16.4, 5.15.4 y 5.9.7. Un atacante puede suplantar un canal de mensaje directo al cambiar el tipo de canal • https://mattermost.com/security-updates • CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel •

CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0

An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There are weak permissions for configuration files. Se detectó un problema en Mattermost Server versiones anteriores a 5.18.0, 5.17.2, 5.16.4, 5.15.4 y 5.9.7. Se presentan permisos débiles para los archivos de configuración • https://mattermost.com/security-updates • CWE-281: Improper Preservation of Permissions •

CVSS: 7.2EPSS: 0%CPEs: 8EXPL: 0

An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There is SQL injection by admins via SearchAllChannels. Se detectó un problema en Mattermost Server versiones anteriores a 5.18.0, 5.17.2, 5.16.4, 5.15.4 y 5.9.7. Se presenta una inyección SQL por parte de los administradores mediante SearchAllChannels • https://mattermost.com/security-updates • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •