Browse / Mattermost

Mattermost

See its reports on the map

What gets reported to Mattermost

• Access Control5
• Denial of Service5
• Cross-site Scripting3
• Cryptography1
• Code Execution1
• Misconfiguration1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Reset password link sent over unsecured http protocolImproper Access Control - Generic · high
   $750440 votes
2. Account takeover due to misconfigurationUse of a Key Past its Expiration Date · low
   133 votes
3. Persistant Arbitrary code execution in mattermost androidCode Injection · high
   67 votes
4. ABLE TO TRICK THE VICTIM INTO USING A CRAFTED EMAIL ADDRESS FOR A PARTICULAR SESSION AND THEN LATER TAKE BACK THE ACCOUNT Violation of Secure Design Principles · low
   49 votes
5. Bypass Email Verification in Customer PortalImproper Access Control - Generic · low
   45 votes
6. Privilege Escalation leading to post in channel without having privilegePrivilege Escalation · low
   45 votes
7. Member role which doesn't have permission to send message can send by executing channel commandsImproper Access Control - Generic · medium
   44 votes
8. Mattermost Server OAuth Flow Cross-Site ScriptingCross-site Scripting (XSS) - Reflected · high
   $90044 votes
9. Self XSS in Create New Workspace ScreenCross-site Scripting (XSS) - Generic · low
   42 votes
10. Posts sent via websockets aren't sanitized properlyImproper Input Validation · low
    $15040 votes
11. html injection via invite members can be leads account takeover Cross-site Scripting (XSS) - Generic · low
    38 votes
12. Invitation Email is resent as a Reminder after invalidating pending email invitesImproper Access Control - Generic · low
    30 votes
13. Uninstalling Mattermost Launcher for Windows (64-bit), then reinstalling keeps you logged in without authenticationImproper Restriction of Authentication Attempts · low
    20 votes
14. DoS via Playbook Uncontrolled Resource Consumption · medium
    18 votes
15. Specially crafted message request crashes the webapp for users who view the messageUncontrolled Resource Consumption · low
    $15017 votes
16. DoS via large console messagesUncontrolled Resource Consumption · low
    $15015 votes
17. DOS: out of memory from gif through upload apiUncontrolled Resource Consumption · low
    $15012 votes
18. DoS via Automatic Response MessageUncontrolled Resource Consumption · medium
    9 votes