CVE-2025-25068
Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8, 10.5.x <= 10.5.0 fail to enforce MFA on plugin endpoints, which allows authenticated attackers to bypass MFA protections via API requests to plugin-specific routes.
Vendor
Product
CWE
Yayın Tarihi
2025-03-21 09:15:12
Güncelleme
2025-03-27 14:03:38
Source Identifier
responsibledisclosure@mattermost.com
KEV Date Added
-