Doyensec

Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise

Mobile SSO authentication flow allows credential theft via malicious server

One-Click Mattermost Account Takeover via Poisoned RelayState SAML Parameter

CSRF Allows Call Initiation and Message Delivery

Inadequate validation of SSO redirect credentials permits credential theft

Mattermost Desktop App crashes when clicking on malformed external URL

Arbitrary Mattermost Team can be joined by manipulating the SAML RelayState

Arbitrary Mattermost Team can be joined by manipulating the OAuth state

Mattermost Desktop DoS when user has basic authentication server configured

Insecure string comparison enables timing attacks