Mattermost: >> Mattermost Server >> 6.0.1 Security Vulnerabilities
Mattermost 6.4.x and earlier fails to properly invalidate pending email invitations when the action is performed from the system console, which allows accidentally invited users to join the workspace and access information from the public teams and channels.
CVSS Score
3.7
EPSS Score
0.002
Published
2022-04-19
A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body.
CVSS Score
5.3
EPSS Score
0.003
Published
2022-03-10
A stack overflow bug in the document extractor in Mattermost Server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted Apple Pages document.
CVSS Score
4.3
EPSS Score
0.004
Published
2022-03-10
Page 6