Mattermost vulnerabilities, page 4
663 vulnerabilities
Known vulnerabilities in Mattermost products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 23 products.
CVE-2016-11067github.com/mattermostmattermost-server+1
EPSS score1.11%
An issue was discovered in Mattermost Server before 3.2.0. It allowed crafted posts that could cause a web browser to hang.CVE-2016-11075github.com/mattermostmattermost-server+1EPSS score0.93%
An issue was discovered in Mattermost Server before 3.0.0. It allows attackers to obtain sensitive information about team URLs via an API.CVE-2016-11068github.com/mattermostmattermost-server+1EPSS score0.93%
An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection.CVE-2016-11071github.com/mattermostmattermost-server+1EPSS score0.69%
An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place.CVE-2016-11069github.com/mattermostmattermost-server+1EPSS score0.90%
An issue was discovered in Mattermost Server before 3.2.0. It mishandles brute-force attempts at password change.CVE-2016-11066github.com/mattermostmattermost-server+1EPSS score1.15%
An issue was discovered in Mattermost Server before 3.2.0. The initial_load API disclosed unnecessary personal information.CVE-2025-21083mattermostmattermost+1EPSS score0.52%
Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.CVE-2025-21088chainguardmattermost-fips-10.5+7EPSS score0.56%
Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the frontend via crafted malicious input.CVE-2025-54499github.com/mattermostmattermost-server+5EPSS score0.27%
Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secretsCVE-2025-54458github.com/mattermostmattermost-plugin-confluence+2EPSS score0.21%
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint.CVE-2025-54525github.com/mattermostmattermost-plugin-confluence+2EPSS score0.34%
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body.CVE-2025-54478github.com/mattermostmattermost-plugin-confluence+2EPSS score0.24%
Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to the edit channel subscription endpoint.CVE-2025-54463github.com/mattermostmattermost-plugin-confluence+2EPSS score0.30%
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body.CVE-2025-2570github.com/mattermostmattermost-server+5EPSS score0.34%
Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have access to `ExperimentalSettings` which allows a System Manager to access `ExperimentSettings` when `RestrictSystemAdmin` is true via System Console.CVE-2025-2424chainguardmattermost-fips-10.5+7EPSS score0.26%
Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to check if a file has been deleted when creating a bookmark which allows an attacker who knows the IDs of deleted files to obtain metadata of the files via bookmark creation.CVE-2025-2475chainguardmattermost-fips-10.5+7EPSS score0.23%
Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to invalidate the cache when a user account is converted to a bot which allows an attacker to login to the bot exactly one time via normal credentials.CVE-2025-2527github.com/mattermostmattermost-server+5EPSS score0.31%
Mattermost versions 10.5.x <= 10.5.2, 9.11.x <= 9.11.11 failed to properly verify a user's permissions when accessing groups, which allows an attacker to view group information via an API request.CVE-2025-2564chainguardmattermost-fips-10.5+7EPSS score0.29%
Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which allows authenticated users to view members and member information of archived channels even when this setting is disabled.CVE-2025-2571github.com/mattermostmattermost-server+5EPSS score0.21%
Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to gain unauthorized access to bot accounts via the Google OAuth signup flow.CVE-2025-13326mattermostmattermost+1EPSS score0.11%
Mattermost Desktop App versions <6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC permissions via copying the binary to a tmp folder.