Github.Com/Mattermost/Mattermost/Server/Public
Approved changes feed: RSS · Atom
cpe:2.3:a:mattermost:github.com/mattermost/mattermost/server/public:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc) |
|---|---|
| Product | Github.Com/Mattermost/Mattermost/Server/Public (a88c6ed8-e110-5e89-8156-b248055656e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13426 |
vulnerable | 2026-07-29 00:23:33.029882 |
Client4 fails to validate path parameters
MEDIUM (5.4)
The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail to validate path parameters when constructing API route paths which allows an attacker to redirect API calls to unintended endpoints via crafted IDs containing path traversal components. Mattermost Advisory ID: MMSA-2025-00532
Published: 2026-06-26T13:47:10.090Z
Updated: 2026-06-26T14:39:00.126Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.