CVE-2025-2527 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Mattermost versions 10.5.x
Medium CVSS: 4.3

CVE-2025-2527

Mattermost versions 10.5.x <= 10.5.2, 9.11.x <= 9.11.11 failed to properly verify a user's permissions when accessing groups, which allows an attacker to view group information via an API request.
Vendor
Mattermost
Product
Mattermost Server
CWE
CWE-863
Yayın Tarihi
2025-05-15 16:15:33
Güncelleme
2025-08-22 20:21:35
Source Identifier
responsibledisclosure@mattermost.com
KEV Date Added
-

Kategoriler

Referanslar