Beveiligingsadvies

CVE-2025-9081

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-19 19:36:14
Laatst bijgewerkt 2025-09-19 19:52:03
Toegewezen door Mattermost
CVSS-score 3.1
Status PUBLISHED

Beschrijving

Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration