Vulnerabilities > Mattermost > Mattermost Server > 7.10.5

DATE CVE VULNERABILITY TITLE RISK
2023-12-12 CVE-2023-6727 Unspecified vulnerability in Mattermost Server
Mattermost fails to perform correct authorization checks when creating a playbook action, allowing users without access to the playbook to create playbook actions.
network
low complexity
mattermost
4.3
2023-12-12 CVE-2023-49809 Resource Exhaustion vulnerability in Mattermost Server
Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash.
network
low complexity
mattermost CWE-400
6.5
2023-12-12 CVE-2023-6547 Unspecified vulnerability in Mattermost Server
Mattermost fails to validate team membership when a user attempts to access a playbook, allowing a user with permissions to a playbook but no permissions to the team the playbook is on to access and modify the playbook.
network
low complexity
mattermost
5.4