Beveiligingsadvies

CVE-2025-2564

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-16 16:12:14

Laatst bijgewerkt 2025-04-17 19:41:45

Toegewezen door Mattermost

CVSS-score 4.3

Status PUBLISHED

Beschrijving

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which allows authenticated users to view members and member information of archived channels even when this setting is disabled.

← Alle CVE's bekijken Bekijk op cve.org ↗