CVE-2025-2571
Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to gain unauthorized access to bot accounts via the Google OAuth signup flow.
Vendor
Product
CWE
Yayın Tarihi
2025-05-30 15:15:40
Güncelleme
2025-10-15 14:15:37
Source Identifier
responsibledisclosure@mattermost.com
KEV Date Added
-