Security Advisory

CVE-2025-32093

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-14 06:57:54

Last updated 2025-04-14 13:58:29

Assigner Mattermost

State PUBLISHED

Description

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to restrict certain operations on system admins to only other system admins, which allows delegated granular administration users with the "Edit Other Users" permission to perform unauthorized modifications to system administrators via improper permission validation.

← Browse all CVEs View on cve.org ↗