Beveiligingsadvies

CVE-2025-13767

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-24 08:01:27

Laatst bijgewerkt 2025-12-24 16:36:22

Toegewezen door Mattermost

CVSS-score 4.3

Status PUBLISHED

Beschrijving

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.

← Alle CVE's bekijken Bekijk op cve.org ↗