Beveiligingsadvies

CVE-2026-13426

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-26 13:47:10

Laatst bijgewerkt 2026-06-26 14:39:00

Toegewezen door Mattermost

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail to validate path parameters when constructing API route paths which allows an attacker to redirect API calls to unintended endpoints via crafted IDs containing path traversal components. Mattermost Advisory ID: MMSA-2025-00532

← Alle CVE's bekijken Bekijk op cve.org ↗