An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It allows attackers to obtain sensitive information about team URLs via an API.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It does not ensure that a cookie is used over SSL.

Published at: June 19, 2020 at 04:15PM
View on website