An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. A password-reset link could be reused.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It allows attackers to obtain sensitive information about team URLs via an API.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It does not ensure that a cookie is used over SSL.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account.

Published at: June 19, 2020 at 04:15PM
View on website