An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 2.2.0. It allows unintended access to information stored by a web browser.

Published at: June 19, 2020 at 04:15PM
View on website