Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren.
[NEU] [mittel] Mattermost: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-16 11:45 UTC
- Importiert: 2026-10-20 10:49 UTC
- CVSS: 7.1
- Quelle-ID:
cert_bund - uid_hash:
23697114b6d1fdefc54531a0b076d4eaa4d942a470ebf27c225e75dafcc9bcb2
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7.1 |
MEDIUM |
6.5 |
2026-10-16 |
|||
HIGH |
7.1 |
HIGH |
7.1 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
4.3 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
6.5 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
4.3 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
6.4 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
4.3 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
4.4 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
6.5 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
4.5 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
4.9 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
4.3 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
6.5 |
2026-10-16 |
|||
HIGH |
7.1 |
MEDIUM |
4.3 |
2026-10-16 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |