Mattermost Server 5.9.0 Release Candidate 1
Approved changes feed: RSS · Atom
cpe:2.3:a:mattermost:mattermost_server:5.9.0:rc1:*:*:*:*:*:*
part: a version: 5.9.0 update: rc1
| Vendor | Mattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc) |
|---|---|
| Product | Mattermost Server (657bc445-594e-5ca1-a676-4f18538f1c02) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mattermost/mattermost-server |
purl2cpe | 2026-06-01 10:18:19.892965 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-20878 |
vulnerable | 2026-06-03 14:40:17.770058 |
Details available
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Changes, within the application, to e-mail addresses are mishandled.
Published: 2020-06-19T16:29:00.000Z
Updated: 2024-08-05T02:53:09.540Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20877 |
vulnerable | 2026-06-03 14:40:17.769569 |
Details available
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information about whether someone has 2FA enabled.
Published: 2020-06-19T16:28:20.000Z
Updated: 2024-08-05T02:53:09.368Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20876 |
vulnerable | 2026-06-03 14:40:17.769203 |
Details available
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. Users can deactivate themselves, bypassing a policy.
Published: 2020-06-19T16:22:57.000Z
Updated: 2024-08-05T02:53:09.458Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20875 |
vulnerable | 2026-06-03 14:40:17.768839 |
Details available
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows a password reset to proceed while an e-mail address is being changed.
Published: 2020-06-19T16:22:05.000Z
Updated: 2024-08-05T02:53:09.539Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20874 |
vulnerable | 2026-06-03 14:40:17.768478 |
Details available
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during a role change.
Published: 2020-06-19T15:42:50.000Z
Updated: 2024-08-05T02:53:09.546Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20873 |
vulnerable | 2026-06-03 14:40:17.768100 |
Details available
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation.
Published: 2020-06-19T15:24:13.000Z
Updated: 2024-08-05T02:53:09.459Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20872 |
vulnerable | 2026-06-03 14:40:17.767717 |
Details available
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can attack local services.
Published: 2020-06-19T15:23:27.000Z
Updated: 2024-08-05T02:53:09.430Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20871 |
vulnerable | 2026-06-03 14:40:17.767318 |
Details available
An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking.
Published: 2020-06-19T15:22:39.000Z
Updated: 2024-08-05T02:53:09.535Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20868 |
vulnerable | 2026-06-03 14:40:17.761790 |
Details available
An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated.
Published: 2020-06-19T15:19:47.000Z
Updated: 2024-08-05T02:53:09.550Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20859 |
vulnerable | 2026-06-03 14:40:17.748669 |
Details available
An issue was discovered in Mattermost Server before 5.15.0. Login access control can be bypassed via crafted input.
Published: 2020-06-19T14:13:02.000Z
Updated: 2024-08-05T02:53:09.405Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.