更新: 319 个文件 - 2026-03-31 03:06:10

07-framework-security/platforms/mattermost/INDEX.md

@@ -5,14 +5,14 @@
 - 系统 ID: `mattermost`
 - 分类: `platforms`
 - 覆盖策略: `rolling-24m`
-- 总案例数: `33`
-- 近 30 天新增/更新: `21`
-- 重点 Markdown 案例数: `33`
+- 总案例数: `35`
+- 近 30 天新增/更新: `23`
+- 重点 Markdown 案例数: `35`
 - 已实证(真实版本): `0`
 - 已实证(synthetic): `0`
 - 阻塞数: `0`
-- 待人工/缺浏览器证据: `33`
-- 最近渲染时间: `2026-03-30T09:18:25+00:00`
+- 待人工/缺浏览器证据: `35`
+- 最近渲染时间: `2026-03-31T09:18:20+00:00`
 
 ## 目标约束
 
@@ -34,6 +34,8 @@
 | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
 |------|--------|----------|----------|----------|------------|----------|--------|
 | Issue Identifier | `severity` | `generated` | `triage-manual` | `synthetic` | `official` | `Fix Release Date` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-issue-identifier.md) |
+| Mattermost allows attackers to take over arbitrary user accounts via overly permissive substring matching flaw | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-31T05:32:49.079377Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-27656.md) |
+| Mattermost doesn't rate limit login requests, allowing DoS | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-31T05:31:41.869147Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-26233.md) |
 | Mattermost fails to validate user's authentication method when processing account auth type switch | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:23.696710Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-22545.md) |
 | Mattermost fails to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:08.125706Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-2455.md) |
 | Mattermost fails to properly enforce read permissions in search API endpoints | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:55:57.125165Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-24692.md) |