Security Advisory
CVE-2025-55070
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Mattermost versions <11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users to access sensitive information via WebSocket events