Beveiligingsadvies

CVE-2025-0503

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-14 17:52:17

Laatst bijgewerkt 2025-02-14 18:09:02

Toegewezen door Mattermost

CVSS-score 3.1

Status PUBLISHED

Beschrijving

Mattermost versions 9.11.x <= 9.11.6 fail to filter out DMs from the deleted channels endpoint which allows an attacker to infer user IDs and other metadata from deleted DMs if someone had manually marked DMs as deleted in the database.

← Alle CVE's bekijken Bekijk op cve.org ↗