Beveiligingsadvies

CVE-2025-3230

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-30 14:22:09

Laatst bijgewerkt 2025-05-30 14:42:40

Toegewezen door Mattermost

CVSS-score 5.4

Status PUBLISHED

Beschrijving

Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previously issued tokens.

← Alle CVE's bekijken Bekijk op cve.org ↗