vultza (vultza)

Details of archived public channels are leaked to members of another team

Denial of Service via specially crafted block fields in Mattermost Boards

Leak Inaccessible Playbook Information via Channel Action IDOR

DoS in Mattermost Playbooks via Excessive Task Actions

Leaked Metadata of Deleted Files via Bookmark Creation

Zipbomb DoS via Missing Slack Import Validation

Authenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server

Authenticated user could send multiple requests containing a large Auto Responder Message payload and can crash a Mattermost server

Denial of Service via Board Import Zip Bomb

Playbook Plugin Crash via Run Checklist