Beveiligingsadvies

CVE-2025-1398

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-17 14:19:51
Laatst bijgewerkt 2025-03-31 15:38:58
Toegewezen door Mattermost
CVSS-score 3.3
Status PUBLISHED

Beschrijving

Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection.