Mattermost Plugins vulnerabilities

2 known vulnerabilities affecting mattermost/mattermost_plugins.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1LOW1

Vulnerabilities

Page 1 of 1

CVE-2023-3613LOWCVSS 3.5≤ 7.8.52023-07-17

CVE-2023-3613 [LOW] CWE-863 CVE-2023-3613: Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding user Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

CVE-2019-20864HIGHCVSS 7.5fixed in 5.13.02020-06-19

CVE-2019-20864 [HIGH] CVE-2019-20864: An issue was discovered in Mattermost Plugins before 5.13.0. The GitHub plugin allows an attacker to An issue was discovered in Mattermost Plugins before 5.13.0. The GitHub plugin allows an attacker to attach his Mattermost account to a different person's GitHub account.