Threats tagged 'ghsa-rmvv-8v8w-rf7x'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-4646Mattermost server · Mattermost doesn't validate user-supplied input in API request handlers Medium4.3EPSS 0.3%2026-05-26GCVE DatabaseCVE-2026-4646 Mattermost versions 10.11.0 through 10.11.14, 11.4.0 through 11.4.4, 11.5.0 through 11.5.3, and 11.6.0 are affected by a vulnerability where user-supplied input in API request handlers is not properly validated. This flaw allows an authenticated attacker to crash the plugin process by sending a crafted HTTP request to the pull request details endpoint. The vulnerability has been assigned CVE-2026-4646 and is categorized under CWE-1287. EPSS 0.3%Vulnerability CWE-1287 #ghsa-rmvv-8v8w-rf7x #go	GCVE Database	2026-05-26

Page 1 of 1