Yüksek CVSS 7.2
CVE-2025-9079: Mattermost Server: dizin geçişi
Açıklama (NVD)
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to validate import directory path configuration which allows admin users to execute arbitrary code via malicious plugin upload to prepackaged plugins directory
Özet bilgiler
- Ürün
- Mattermost Mattermost Server
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,64 (yüzdelik 51)
- CWE
- CWE-22
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| mattermost-mattermost-server | 9.11.0 | — | 9.11.18 |
| mattermost-mattermost-server | 10.5.0 | — | 10.5.9 |
| mattermost-mattermost-server | 10.8.0 | — | 10.8.4 |
| mattermost-mattermost-server | 10.9.0 | — | 10.9.4 |
| mattermost-mattermost-server | 10.10.0 | — | 10.10.2 |