CVE-2025-9076: Mattermost Server: eksik yetkilendirme

Açıklama (NVD)

Mattermost versions 10.10.x <= 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remote clusters to access sensitive user information via unsanitized user objects. This vulnerability affects Mattermost Server instances with shared channels enabled.

Özet bilgiler

Ürün

Mattermost Mattermost Server

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,26 (yüzdelik 18)

CWE

CWE-862

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• mattermost.com
• CWE-862