[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2016-11068":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-21T15:42:55.914Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":385,"aliases":386,"duplicate_of":9,"upstream":389,"downstream":390,"duplicates":395,"related":396,"reserved_at":9,"published_at":399,"modified_at":400,"state":401,"summary":402,"references_raw":411,"kevs":442,"epss":443,"epss_history":446,"metrics":704,"affected":716},"CVE-2016-11068","An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-74","Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')","The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.","weakness","Incomplete","Class","High",[20,24,28,32,36,40,224,228,232,236,240,281,285,289,293,297,301,305,309,313,317,321,325,329,333,337,341,345,349,353,357,361,365,369,373,377,381],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-101","Server Side Include (SSI) Injection",[],{"id":29,"name":30,"techniques":31},"CAPEC-105","HTTP Request Splitting",[],{"id":33,"name":34,"techniques":35},"CAPEC-108","Command Line Execution through SQL Injection",[],{"id":37,"name":38,"techniques":39},"CAPEC-120","Double Encoding",[],{"id":41,"name":42,"techniques":43},"CAPEC-13","Subverting Environment Variable Values",[44,142,184],{"id":45,"name":46,"tactics":47,"countermeasures":54},"T1562.003","Impair Command History Logging",[48,51],{"id":49,"name":50},"TA0030","Defense Evasion",{"id":52,"name":53},"TA0005","Stealth",[55,60,65,70,74,78,83,87,92,97,101,105,109,113,117,121,125,129,134,138],{"id":56,"name":57,"tactic":58},"D3-EFA","Emulated File Analysis",{"name":59},"Detect",{"id":61,"name":62,"tactic":63},"D3-DF","Decoy File",{"name":64},"Deceive",{"id":66,"name":67,"tactic":68},"D3-CM","Content Modification",{"name":69},"Isolate",{"id":71,"name":72,"tactic":73},"D3-EAL","Executable Allowlisting",{"name":69},{"id":75,"name":76,"tactic":77},"D3-CF","Content Filtering",{"name":69},{"id":79,"name":80,"tactic":81},"D3-RKD","Registry Key Deletion",{"name":82},"Evict",{"id":84,"name":85,"tactic":86},"D3-EDL","Executable Denylisting",{"name":69},{"id":88,"name":89,"tactic":90},"D3-FE","File Encryption",{"name":91},"Harden",{"id":93,"name":94,"tactic":95},"D3-CI","Configuration Inventory",{"name":96},"Model",{"id":98,"name":99,"tactic":100},"D3-DRA","Disable Remote Access",{"name":91},{"id":102,"name":103,"tactic":104},"D3-CQ","Content Quarantine",{"name":69},{"id":106,"name":107,"tactic":108},"D3-RFAM","Remote File Access Mediation",{"name":69},{"id":110,"name":111,"tactic":112},"D3-FA","File Analysis",{"name":59},{"id":114,"name":115,"tactic":116},"D3-FIM","File Integrity Monitoring",{"name":59},{"id":118,"name":119,"tactic":120},"D3-LFP","Local File Permissions",{"name":69},{"id":122,"name":123,"tactic":124},"D3-ACH","Application Configuration Hardening",{"name":91},{"id":126,"name":127,"tactic":128},"D3-DA","Dynamic Analysis",{"name":59},{"id":130,"name":131,"tactic":132},"D3-RC","Restore Configuration",{"name":133},"Restore",{"id":135,"name":136,"tactic":137},"D3-FEV","File Eviction",{"name":82},{"id":139,"name":140,"tactic":141},"D3-RF","Restore File",{"name":133},{"id":143,"name":144,"tactics":145,"countermeasures":157},"T1574.006","Dynamic Linker Hijacking",[146,149,152,153,154],{"id":147,"name":148},"TA0110","Persistence",{"id":150,"name":151},"TA0111","Privilege Escalation",{"id":49,"name":50},{"id":52,"name":53},{"id":155,"name":156},"TA0104","Execution",[158,160,162,164,166,168,170,174,176,178,180,182],{"id":114,"name":115,"tactic":159},{"name":59},{"id":66,"name":67,"tactic":161},{"name":69},{"id":88,"name":89,"tactic":163},{"name":91},{"id":135,"name":136,"tactic":165},{"name":82},{"id":61,"name":62,"tactic":167},{"name":64},{"id":139,"name":140,"tactic":169},{"name":133},{"id":171,"name":172,"tactic":173},"D3-SFA","System File Analysis",{"name":59},{"id":75,"name":76,"tactic":175},{"name":69},{"id":118,"name":119,"tactic":177},{"name":69},{"id":106,"name":107,"tactic":179},{"name":69},{"id":110,"name":111,"tactic":181},{"name":59},{"id":102,"name":103,"tactic":183},{"name":69},{"id":185,"name":186,"tactics":187,"countermeasures":193},"T1574.007","Path Interception by PATH Environment Variable",[188,189,190,191,192],{"id":147,"name":148},{"id":150,"name":151},{"id":49,"name":50},{"id":52,"name":53},{"id":155,"name":156},[194,196,198,200,202,204,206,208,210,212,214,216,218,220,222],{"id":56,"name":57,"tactic":195},{"name":59},{"id":61,"name":62,"tactic":197},{"name":64},{"id":139,"name":140,"tactic":199},{"name":133},{"id":88,"name":89,"tactic":201},{"name":91},{"id":110,"name":111,"tactic":203},{"name":59},{"id":126,"name":127,"tactic":205},{"name":59},{"id":75,"name":76,"tactic":207},{"name":69},{"id":118,"name":119,"tactic":209},{"name":69},{"id":114,"name":115,"tactic":211},{"name":59},{"id":106,"name":107,"tactic":213},{"name":69},{"id":102,"name":103,"tactic":215},{"name":69},{"id":66,"name":67,"tactic":217},{"name":69},{"id":71,"name":72,"tactic":219},{"name":69},{"id":84,"name":85,"tactic":221},{"name":69},{"id":135,"name":136,"tactic":223},{"name":82},{"id":225,"name":226,"techniques":227},"CAPEC-135","Format String Injection",[],{"id":229,"name":230,"techniques":231},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":233,"name":234,"techniques":235},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":237,"name":238,"techniques":239},"CAPEC-250","XML Injection",[],{"id":241,"name":242,"techniques":243},"CAPEC-267","Leverage Alternate Encoding",[244],{"id":245,"name":246,"tactics":247,"countermeasures":250},"T1027","Obfuscated Files or Information",[248,249],{"id":49,"name":50},{"id":52,"name":53},[251,253,255,257,259,261,263,265,267,269,271,273,275,277,279],{"id":102,"name":103,"tactic":252},{"name":69},{"id":135,"name":136,"tactic":254},{"name":82},{"id":88,"name":89,"tactic":256},{"name":91},{"id":71,"name":72,"tactic":258},{"name":69},{"id":84,"name":85,"tactic":260},{"name":69},{"id":139,"name":140,"tactic":262},{"name":133},{"id":61,"name":62,"tactic":264},{"name":64},{"id":106,"name":107,"tactic":266},{"name":69},{"id":126,"name":127,"tactic":268},{"name":59},{"id":114,"name":115,"tactic":270},{"name":59},{"id":75,"name":76,"tactic":272},{"name":69},{"id":56,"name":57,"tactic":274},{"name":59},{"id":118,"name":119,"tactic":276},{"name":69},{"id":110,"name":111,"tactic":278},{"name":59},{"id":66,"name":67,"tactic":280},{"name":69},{"id":282,"name":283,"techniques":284},"CAPEC-273","HTTP Response Smuggling",[],{"id":286,"name":287,"techniques":288},"CAPEC-28","Fuzzing",[],{"id":290,"name":291,"techniques":292},"CAPEC-3","Using Leading 'Ghost' Character Sequences to Bypass Input Filters",[],{"id":294,"name":295,"techniques":296},"CAPEC-34","HTTP Response Splitting",[],{"id":298,"name":299,"techniques":300},"CAPEC-42","MIME Conversion",[],{"id":302,"name":303,"techniques":304},"CAPEC-43","Exploiting Multiple Input Interpretation Layers",[],{"id":306,"name":307,"techniques":308},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":310,"name":311,"techniques":312},"CAPEC-46","Overflow Variables and Tags",[],{"id":314,"name":315,"techniques":316},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":318,"name":319,"techniques":320},"CAPEC-51","Poison Web Service Registry",[],{"id":322,"name":323,"techniques":324},"CAPEC-52","Embedding NULL Bytes",[],{"id":326,"name":327,"techniques":328},"CAPEC-53","Postfix, Null Terminate, and Backslash",[],{"id":330,"name":331,"techniques":332},"CAPEC-6","Argument Injection",[],{"id":334,"name":335,"techniques":336},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":338,"name":339,"techniques":340},"CAPEC-67","String Format Overflow in syslog()",[],{"id":342,"name":343,"techniques":344},"CAPEC-7","Blind SQL Injection",[],{"id":346,"name":347,"techniques":348},"CAPEC-71","Using Unicode Encoding to Bypass Validation Logic",[],{"id":350,"name":351,"techniques":352},"CAPEC-72","URL Encoding",[],{"id":354,"name":355,"techniques":356},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":358,"name":359,"techniques":360},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":362,"name":363,"techniques":364},"CAPEC-79","Using Slashes in Alternate Encoding",[],{"id":366,"name":367,"techniques":368},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":370,"name":371,"techniques":372},"CAPEC-80","Using UTF-8 Encoding to Bypass Validation Logic",[],{"id":374,"name":375,"techniques":376},"CAPEC-83","XPath Injection",[],{"id":378,"name":379,"techniques":380},"CAPEC-84","XQuery Injection",[],{"id":382,"name":383,"techniques":384},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],[],[387,388],"GHSA-7vmw-6c7h-rrrv","GO-2025-4048",[],[391,393],{"_key":392},"OPENSUSE-SU-2025:15710-1",{"_key":394},"OPENSUSE-SU-2026:21483-1",[],[397,398],{"_key":392},{"_key":394},"2020-06-19T19:24:49.000Z","2024-08-06T03:47:34.550Z","Modified",{"cisa_kev":403,"cisa_ransomware":403,"cisa_vendor":9,"epss_severity":404,"epss_score":405,"severity":406,"severity_score":407,"severity_version":408,"severity_source":409,"severity_vector":410,"severity_status":401},false,"low",0.0092,"medium",5.3,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",[412,419,425,430,434,438],{"url":413,"sources":414,"tags":416},"https://mattermost.com/security-updates/",[415,409],"cve.org",[417,418],"X Refsource CONFIRM","Vendor Advisory",{"url":420,"sources":421,"tags":423},"https://nvd.nist.gov/vuln/detail/CVE-2016-11068",[422],"osv_go",[424],"Advisory",{"url":426,"sources":427,"tags":428},"https://github.com/mattermost/mattermost/commit/6c5a8be6bfe1d6b9d8f71a6b0dc4d8cf93a03aab",[422],[429],"WEB",{"url":431,"sources":432,"tags":433},"https://github.com/mattermost/mattermost",[422],[429],{"url":435,"sources":436,"tags":437},"https://mattermost.com/security-updates",[422],[429],{"url":439,"sources":440,"tags":441},"https://github.com/advisories/GHSA-7vmw-6c7h-rrrv",[422],[424],[],{"date":444,"score":405,"percentile":445},"2026-08-21",0.57591,[447,451,454,457,460,463,466,469,472,474,477,479,482,485,488,491,494,497,500,502,505,508,511,514,516,519,522,525,528,531,534,537,540,543,546,548,551,554,557,560,563,566,569,572,575,578,581,584,587,590,593,596,599,602,605,608,611,614,617,620,623,626,628,631,634,637,640,643,646,649,652,655,658,660,663,666,668,671,673,675,677,680,683,686,689,692,694,696,699,701],{"date":448,"score":449,"percentile":450},"2025-11-04",0.0035,0.56829,{"date":452,"score":449,"percentile":453},"2025-11-05",0.56806,{"date":455,"score":449,"percentile":456},"2025-11-06",0.56807,{"date":458,"score":449,"percentile":459},"2025-11-07",0.56821,{"date":461,"score":449,"percentile":462},"2025-11-08",0.56825,{"date":464,"score":449,"percentile":465},"2025-11-09",0.56813,{"date":467,"score":449,"percentile":468},"2025-11-10",0.56787,{"date":470,"score":449,"percentile":471},"2025-11-11",0.568,{"date":473,"score":449,"percentile":462},"2025-11-12",{"date":475,"score":449,"percentile":476},"2025-11-13",0.5683,{"date":478,"score":449,"percentile":476},"2025-11-14",{"date":480,"score":449,"percentile":481},"2025-11-15",0.5682,{"date":483,"score":449,"percentile":484},"2025-11-16",0.56804,{"date":486,"score":449,"percentile":487},"2025-11-17",0.56798,{"date":489,"score":449,"percentile":490},"2025-11-18",0.54503,{"date":492,"score":449,"percentile":493},"2025-11-19",0.54519,{"date":495,"score":449,"percentile":496},"2025-11-20",0.54506,{"date":498,"score":449,"percentile":499},"2025-11-21",0.56811,{"date":501,"score":449,"percentile":456},"2025-11-22",{"date":503,"score":449,"percentile":504},"2025-11-23",0.56781,{"date":506,"score":449,"percentile":507},"2025-11-24",0.56775,{"date":509,"score":449,"percentile":510},"2025-11-25",0.56778,{"date":512,"score":449,"percentile":513},"2025-11-26",0.56782,{"date":515,"score":449,"percentile":513},"2025-11-27",{"date":517,"score":449,"percentile":518},"2025-11-28",0.56757,{"date":520,"score":449,"percentile":521},"2025-11-29",0.56745,{"date":523,"score":449,"percentile":524},"2025-11-30",0.56737,{"date":526,"score":449,"percentile":527},"2025-12-01",0.56891,{"date":529,"score":449,"percentile":530},"2025-12-02",0.56907,{"date":532,"score":449,"percentile":533},"2025-12-03",0.56903,{"date":535,"score":449,"percentile":536},"2025-12-04",0.56738,{"date":538,"score":449,"percentile":539},"2025-12-05",0.56755,{"date":541,"score":449,"percentile":542},"2025-12-06",0.56756,{"date":544,"score":449,"percentile":545},"2025-12-07",0.56754,{"date":547,"score":449,"percentile":542},"2025-12-08",{"date":549,"score":449,"percentile":550},"2025-12-09",0.5678,{"date":552,"score":449,"percentile":553},"2025-12-10",0.56835,{"date":555,"score":449,"percentile":556},"2025-12-11",0.5686,{"date":558,"score":449,"percentile":559},"2025-12-12",0.56885,{"date":561,"score":449,"percentile":562},"2025-12-13",0.56881,{"date":564,"score":449,"percentile":565},"2025-12-14",0.5688,{"date":567,"score":449,"percentile":568},"2025-12-15",0.56866,{"date":570,"score":449,"percentile":571},"2025-12-16",0.56876,{"date":573,"score":449,"percentile":574},"2025-12-17",0.56892,{"date":576,"score":449,"percentile":577},"2025-12-18",0.56933,{"date":579,"score":449,"percentile":580},"2025-12-19",0.56941,{"date":582,"score":449,"percentile":583},"2025-12-20",0.56937,{"date":585,"score":449,"percentile":586},"2025-12-21",0.56916,{"date":588,"score":449,"percentile":589},"2025-12-22",0.56898,{"date":591,"score":449,"percentile":592},"2025-12-23",0.56904,{"date":594,"score":449,"percentile":595},"2025-12-24",0.56913,{"date":597,"score":449,"percentile":598},"2025-12-25",0.56957,{"date":600,"score":449,"percentile":601},"2025-12-26",0.56953,{"date":603,"score":449,"percentile":604},"2025-12-27",0.57004,{"date":606,"score":449,"percentile":607},"2025-12-28",0.56926,{"date":609,"score":449,"percentile":610},"2025-12-29",0.56918,{"date":612,"score":449,"percentile":613},"2025-12-30",0.56914,{"date":615,"score":449,"percentile":616},"2025-12-31",0.56931,{"date":618,"score":449,"percentile":619},"2026-01-01",0.57098,{"date":621,"score":449,"percentile":622},"2026-01-02",0.57079,{"date":624,"score":449,"percentile":625},"2026-01-03",0.57074,{"date":627,"score":449,"percentile":533},"2026-01-04",{"date":629,"score":449,"percentile":630},"2026-01-05",0.5689,{"date":632,"score":449,"percentile":633},"2026-01-06",0.56901,{"date":635,"score":449,"percentile":636},"2026-01-07",0.56927,{"date":638,"score":449,"percentile":639},"2026-01-08",0.56946,{"date":641,"score":449,"percentile":642},"2026-01-09",0.56947,{"date":644,"score":449,"percentile":645},"2026-01-10",0.56944,{"date":647,"score":449,"percentile":648},"2026-01-11",0.56922,{"date":650,"score":449,"percentile":651},"2026-01-12",0.56888,{"date":653,"score":449,"percentile":654},"2026-01-13",0.56859,{"date":656,"score":449,"percentile":657},"2026-01-14",0.569,{"date":659,"score":449,"percentile":592},"2026-01-15",{"date":661,"score":449,"percentile":662},"2026-01-16",0.5693,{"date":664,"score":449,"percentile":665},"2026-01-17",0.56921,{"date":667,"score":449,"percentile":648},"2026-01-18",{"date":669,"score":449,"percentile":670},"2026-01-19",0.56905,{"date":672,"score":449,"percentile":530},"2026-01-20",{"date":674,"score":449,"percentile":595},"2026-01-21",{"date":676,"score":449,"percentile":595},"2026-01-22",{"date":678,"score":449,"percentile":679},"2026-01-23",0.56956,{"date":681,"score":449,"percentile":682},"2026-01-24",0.56961,{"date":684,"score":449,"percentile":685},"2026-01-25",0.56923,{"date":687,"score":449,"percentile":688},"2026-01-26",0.5691,{"date":690,"score":449,"percentile":691},"2026-01-27",0.5692,{"date":693,"score":449,"percentile":577},"2026-01-28",{"date":695,"score":449,"percentile":577},"2026-01-29",{"date":697,"score":449,"percentile":698},"2026-01-30",0.56936,{"date":700,"score":449,"percentile":698},"2026-01-31",{"date":702,"score":449,"percentile":703},"2026-02-01",0.57076,[705,714],{"source":409,"cvss_v2_0":706,"cvss_v3_0":9,"cvss_v3_1":711,"cvss_v4_0":9},{"baseScore":707,"baseSeverity":9,"vectorString":708,"impactScore":709,"exploitabilityScore":710},5,"AV:N/AC:L/Au:N/C:P/I:N/A:N",2.9,10,{"baseScore":407,"baseSeverity":712,"vectorString":410,"impactScore":713,"exploitabilityScore":710},"MEDIUM",2.3,{"source":422,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":715,"cvss_v4_0":9},{"baseScore":407,"baseSeverity":9,"vectorString":410,"impactScore":713,"exploitabilityScore":710},[717,733],{"ecosystem":718,"name":719,"vendor":720,"product":721,"cpe_part":9,"purl_type":722,"purl_namespace":720,"purl_name":721,"source":9,"versions":723},"Go","github.com/mattermost/mattermost-server","github.com/mattermost","mattermost-server","golang",[724,730],{"version":725,"is_range":726,"range_type":727,"version_start":9,"version_start_type":9,"version_end":728,"version_end_type":729,"fixed_in":9},"lt3_2_0",true,"semver","3.2.0","excluding",{"version":731,"is_range":726,"range_type":727,"version_start":9,"version_start_type":9,"version_end":732,"version_end_type":729,"fixed_in":9},"lt3_2_0+incompatible","3.2.0+incompatible",{"ecosystem":9,"name":734,"vendor":735,"product":736,"cpe_part":737,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":738},"mattermost server","mattermost","mattermost_server","a",[739],{"version":740,"is_range":726,"range_type":741,"version_start":9,"version_start_type":9,"version_end":728,"version_end_type":729,"fixed_in":9},"lt3.2.0","cpe"]