Page 8 of 37 results (0.015 seconds)

CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0

A missing permissions check in the /plugins/playbooks/api/v0/runs API in Mattermost allows an attacker to list and view playbooks belonging to a team they are not a member of. • https://mattermost.com/security-updates • CWE-862: Missing Authorization •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages. Una vulnerabilidad de Denegación de Servicio (DoS) en Mattermost permite que un usuario autenticado bloquee el servidor a través de múltiples mensajes de respuesta automática de gran tamaño. • https://hackerone.com/reports/1680241 https://mattermost.com/security-updates • CWE-770: Allocation of Resources Without Limits or Throttling •