Beveiligingsadvies

CVE-2026-3473

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-22 10:27:02

Laatst bijgewerkt 2026-05-22 12:12:49

Toegewezen door Mattermost

CVSS-score 5.9

Status PUBLISHED

Beschrijving

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.. Mattermost Advisory ID: MMSA-2026-00620

← Alle CVE's bekijken Bekijk op cve.org ↗