← All credits
Doyensec
33 vulnerability records and advisories credit this contributor.
CVE-2025-58084
Mattermost Desktop App crashes when clicking on malformed external URL
CVE-2025-9072
One-Click Mattermost Account Takeover via Poisoned RelayState SAML Parameter
CVE-2023-45316
Reflected client side path traversal leading to CSRF in Playbooks
CVE-2023-5920
Lack Of Secure Keyboard Entry Protection in MacOS Desktop
CVE-2023-6459
Public endpoint /metrics of Calls plugin reveals channel IDs
CVE-2023-47168
Open redirect in /oauth/<service>/mobile_login?redirect_to=
CVE-2024-36250
MFA Code Replay
CVE-2024-47401
DoS via Amplified GraphQL Response in Playbooks
CVE-2024-46872
Client-Side Path Traversal Leading to CSRF in Playbooks
CVE-2023-6202
Insecure Direct Object Reference in /plugins/focalboard/ api/v2/users of Mattermost Boards