← Back

Playbooks

playbooks

Vendor: Mattermost • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mattermost
1Playbooks
Jun 17, 2026
May 3, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.
1Mattermost
1Playbooks
Jun 17, 2026
Apr 13, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a...Show more
Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service.Show less