|
222341
|
9.1 |
CRITICAL
Network
|
mattermost
|
mattermost
|
An issue was discovered in Mattermost Mobile Apps before 1.26.0. An attacker can use directory traversal with the Video Preview feature to overwrite arbitrary files on a device.
|
CWE-22
Path Traversal
|
CVE-2019-20851
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222342
|
5.3 |
MEDIUM
Network
|
mattermost
|
mattermost_mobile
|
An issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a device after a logout.
|
CWE-459
Incomplete Cleanup
|
CVE-2019-20850
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222343
|
5.3 |
MEDIUM
Network
|
mattermost
|
mattermost_mobile
|
An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout.
|
CWE-459
Incomplete Cleanup
|
CVE-2019-20849
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222344
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_mobile
|
An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies.
|
CWE-20
Improper Input Validation
|
CVE-2019-20848
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222345
|
5.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.18.0. An attacker can send a user_typing WebSocket event to any channel.
|
NVD-CWE-noinfo
|
CVE-2019-20847
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222346
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage.
|
CWE-281
Improper Preservation of Permissions
|
CVE-2019-20846
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222347
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service (memory consumption) via a large Slack import.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2019-20845
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222348
|
6.5 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel.
|
CWE-924
Improper Enforcement of Message Integrity During Transmission in a Communication Channel
|
CVE-2019-20844
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222349
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There are weak permissions for configuration files.
|
CWE-281
Improper Preservation of Permissions
|
CVE-2019-20843
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222350
|
7.2 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There is SQL injection by admins via SearchAllChannels.
|
CWE-89
SQL Injection
|
CVE-2019-20842
|
2024-11-21 13:39 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|