Mattermost Plugins vulnerabilities

2 vulnerabilities

Known vulnerabilities in Mattermost Plugins, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2019-20864mattermostmattermost_plugins
EPSS score
0.87%
An issue was discovered in Mattermost Plugins before 5.13.0. The GitHub plugin allows an attacker to attach his Mattermost account to a different person's GitHub account.3.5CVE-2023-3613mattermostmattermost_plugins+1
EPSS score
0.29%
Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.