Total vulnerabilities in the database
Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body.
Software | From | Fixed in |
---|---|---|
![]() |
- | 7.8.12 |
![]() |
8.0.0 | 8.0.4 |
![]() |
8.1.0 | 8.1.3 |
![]() |
9.0.0 | 9.0.0.x |
![]() |
9.0.0 | 9.0.1 |
mattermost / mattermost | - | 7.8.11.x |
mattermost / mattermost | 8.0.0 | 8.0.3.x |
mattermost / mattermost | 8.1.0 | 8.1.2.x |
mattermost / mattermost | 9.0.0 | 9.0.0.x |