Vulners
Lucene search
CVE-2025-4128
๐๏ธย 11 Jun 2025ย 10:25:04Reported byย MattermostTypeย 
ย cve๐ย web.nvd.nist.gov๐ย 45ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | CVE-2025-4128 | 11 Jun 202511:30 | โ | circl |
 | Mattermost ๅฎๅ จๆผๆด | 11 Jun 202500:00 | โ | cnnvd |
 | Mattermost Improper Access Restriction Vulnerability | 20 Jun 202500:00 | โ | cnvd |
 | CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability | 11 Jun 202510:25 | โ | cvelist |
 | EUVD-2025-18094 | 3 Oct 202520:07 | โ | euvd |
 | Mattermost allows guest users to view information about public teams they are not members of | 11 Jun 202512:30 | โ | github |
 | CVE-2025-4128 | 11 Jun 202511:15 | โ | nvd |
 | govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media (moderate) | 5 Jul 202500:00 | โ | opensuse |
 | GHSA-JWHW-XF5V-QGXC Mattermost allows guest users to view information about public teams they are not members of | 11 Jun 202512:30 | โ | osv |
| GO-2025-3757 Mattermost allows guest users to view information about public teams they are not members of in github.com/mattermost/mattermost-server | 11 Jun 202517:45 | โ | osv |
10
Node
[
{
"defaultStatus": "unaffected",
"product": "Mattermost",
"vendor": "Mattermost",
"versions": [
{
"lessThanOrEqual": "10.5.4",
"status": "affected",
"version": "10.5.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "9.11.13",
"status": "affected",
"version": "9.11.0",
"versionType": "semver"
},
{
"version": "10.8.0",
"status": "unaffected"
},
{
"version": "10.5.5",
"status": "unaffected"
},
{
"version": "9.11.14",
"status": "unaffected"
}
]
}
]| Source | Link |
|---|---|
| mattermost | www.mattermost.com/security-updates |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| team_id | path | api/v4/teams/{team_id} | Guest users can bypass permissions and view information about public teams they are not members of via a direct API call to /api/v4/teams/{team_id}. | CWE-863 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Jul 2025 19:42Current
3.7Low risk
Vulners AI Score3.7
CVSS 3.13.1 - 4.3
EPSS0.00128
SSVC