← All credits
vultza (vultza)
24 vulnerability records and advisories credit this contributor.
CVE-2024-24776
Incorrect Authorization leads to Channel Member Count Leak
CVE-2024-23493
Team associated AD/LDAP Groups Leaked due to missing authorization
CVE-2024-4183
Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after
CVE-2024-2446
Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to limit the number of @-mentions processed per message, allowing an authenticated attacker to crash the client applications of other users via la