Doyensec

Mattermost SAML RelayState forgery allows unauthorized team membership

Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise

Mobile SSO authentication flow allows credential theft via malicious server

Arbitrary Mattermost Team can be joined by manipulating the SAML RelayState

Arbitrary Mattermost Team can be joined by manipulating the OAuth state

Mattermost Desktop App logging sensitive information and fails to clear data on server deletion

CSRF Allows Call Initiation and Message Delivery

Unauthorized access and subscription vulnerability in Boards

Inadequate validation of SSO redirect credentials permits credential theft

Mattermost Desktop DoS when user has basic authentication server configured