Doyensec

Silent Desktop Screenshot Capture

MFA Code Replay

Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.

Public endpoint /metrics of Calls plugin reveals channel IDs

Client side path traversal due to lack of route parameters validation

Insecure Direct Object Reference in /plugins/focalboard/ api/v2/users of Mattermost Boards

Denial of Service via crashing the Calls Plugin

Lack Of Secure Keyboard Entry Protection in MacOS Desktop

Regex DoS from a malicious server enrolled in Desktop

Lack of Hardening against media exploitation from a remote origin