CVEs for Mattermost
311 matching vulnerabilities, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-48872 Bypass of "Max failed attempts" restriction via race condition
CVSS 4.8 mediumEPSS 0.26%Mattermost
CVE-2024-12247 Improper propagation of permission scheme updates across cluster nodes
CVSS 4.6 mediumEPSS 0.17%Mattermost
CVE-2024-11599 Domain Restriction Bypass on Registration
CVSS 8.2 highEPSS 0.47%Mattermost
CVE-2024-52032 Private channel names leaking when Elasticsearch is enabled
CVSS 4.3 mediumEPSS 0.30%Mattermost
CVE-2024-36250 MFA Code Replay
CVSS 3.1 lowEPSS 0.21%Mattermost
CVE-2024-42000 Unauthorized Access to view channels' details
CVSS 2.7 lowEPSS 0.29%Mattermost
CVE-2024-46872 Client-Side Path Traversal Leading to CSRF in Playbooks
CVSS 4.6 mediumEPSS 0.16%Mattermost
CVE-2024-47401 DoS via Amplified GraphQL Response in Playbooks
CVSS 4.3 mediumEPSS 0.46%Mattermost
CVE-2024-50052 Arbitrary post deletion via Playbooks /ignore-thread endpoint
CVSS 4.3 mediumEPSS 0.28%Mattermost
CVE-2024-10241 Private channel names leaked with Ctrl+K when ElasticSearch is enabled
CVSS 4.3 mediumEPSS 0.30%Mattermost
CVE-2024-10214 Incorrect Session Creation with Desktop SSO
CVSS 3.5 lowEPSS 0.38%Mattermost
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)