Approved changes feed: RSS · Atom

cpe:2.3:a:mattermost:mattermost_server:9.1.1:*:*:*:*:*:*:*

part: a version: 9.1.1 update: *

VendorMattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc)
ProductMattermost Server (657bc445-594e-5ca1-a676-4f18538f1c02)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mattermost/mattermost-server purl2cpe 2026-06-01 10:18:20.034016

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49607 vulnerable 2026-06-03 14:53:20.894196 Playbook plugin crash via missing interface type assertion
MEDIUM (4.3)
Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playbook Plugin when updating the status dialog.
Published: 2023-12-12T08:21:36.568Z
Updated: 2024-08-02T22:01:26.012Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.