← All credits
vultza (vultza)
24 vulnerability records and advisories credit this contributor.
CVE-2025-35965
DoS in Mattermost Playbooks via Excessive Task Actions
CVE-2025-2424
Leaked Metadata of Deleted Files via Bookmark Creation
CVE-2024-54682
Zipbomb DoS via Missing Slack Import Validation
CVE-2024-4183
Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after
CVE-2024-34029
AD/LDAP Group Members Leak
CVE-2024-2446
Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit the number of @-mentions processed per message, allowing an authenticated attacker to crash the client applications of other users via la
CVE-2024-28949
DoS via a large number of User Preferences
CVE-2024-24776
Incorrect Authorization leads to Channel Member Count Leak
CVE-2024-23493
Team associated AD/LDAP Groups Leaked due to missing authorization
CVE-2023-6727
Leak Inaccessible Playbook Information via Channel Action IDOR