Beveiligingsadvies

CVE-2026-10103

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-13 07:57:11

Laatst bijgewerkt 2026-07-14 14:32:32

Toegewezen door Mattermost

CVSS-score 4.3

Status PUBLISHED

Beschrijving

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify post ownership in the shared channel inbound sync handler, which allows an authenticated remote cluster to modify or delete posts authored by local users or other remotes via crafted sync messages referencing arbitrary post IDs in channels shared with that remote.. Mattermost Advisory ID: MMSA-2026-00689

← Alle CVE's bekijken Bekijk op cve.org ↗