|
219831
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file.
|
CWE-862
Missing Authorization
|
CVE-2019-20885
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219832
|
5.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than one post.
|
NVD-CWE-noinfo
|
CVE-2019-20884
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219833
|
4.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin a post.
|
NVD-CWE-noinfo
|
CVE-2019-20883
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219834
|
5.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain requirement when processing a join request for an open team.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-20882
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219835
|
7.3 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA.
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2019-20881
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219836
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service (memory consumption) via OpenGraph.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2019-20880
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219837
|
4.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e-mail addresses do not require credential re-entry.
|
CWE-287
Improper Authentication
|
CVE-2019-20879
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219838
|
4.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes, within the application, to e-mail addresses are mishandled.
|
NVD-CWE-noinfo
|
CVE-2019-20878
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219839
|
5.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information about whether someone has 2FA enabled.
|
NVD-CWE-noinfo
|
CVE-2019-20877
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219840
|
5.4 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Users can deactivate themselves, bypassing a policy.
|
NVD-CWE-noinfo
|
CVE-2019-20876
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|