CVE-2025-4981

🗓️ 20 Jun 2025 10:27:13Reported by MattermostType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 81 Views

Authenticated Mattermost users can execute remote code via path traversal vulnerability in file uploads.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2025-4981	20 Jun 202510:44	–	circl
CNNVD	Mattermost 安全漏洞	20 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-4981 Path Traversal Leading to RCE by Any Authenticated Mattermost User	20 Jun 202510:27	–	cvelist
EUVD	EUVD-2025-28315	3 Oct 202520:07	–	euvd
Github Security Blog	Mattermost allows authenticated users to write files to arbitrary locations	20 Jun 202512:30	–	github
NVD	CVE-2025-4981	20 Jun 202511:15	–	nvd
OSV	GHSA-QH58-9V3J-WCJC Mattermost allows authenticated users to write files to arbitrary locations	20 Jun 202512:30	–	osv
OSV	GO-2025-3769 Mattermost allows authenticated users to write files to arbitrary locations in github.com/mattermost/mattermost-server	28 Jul 202519:57	–	osv
OSV	OPENSUSE-SU-2025:15405-1 govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media	4 Aug 202500:00	–	osv
Positive Technologies	PT-2025-26301	12 May 202500:00	–	ptsecurity

NVD

Node

mattermost mattermost_serverRange9.11.0–9.11.16

mattermost mattermost_serverRange10.5.0–10.5.6

mattermost mattermost_serverRange10.6.0–10.6.6

mattermost mattermost_serverRange10.7.0–10.7.3

mattermost mattermost_serverMatch10.8.0-

mattermost mattermost_serverMatch10.8.0rc1

mattermost mattermost_serverMatch10.8.0rc2

mattermost mattermost_serverMatch10.8.0rc3

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "lessThanOrEqual": "10.5.5",
        "status": "affected",
        "version": "10.5.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.11.15",
        "status": "affected",
        "version": "9.11.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.8.0",
        "status": "affected",
        "version": "10.8.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.7.2",
        "status": "affected",
        "version": "10.7.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.6.5",
        "status": "affected",
        "version": "10.6.0",
        "versionType": "semver"
      },
      {
        "version": "10.9.0",
        "status": "unaffected"
      },
      {
        "version": "10.5.6",
        "status": "unaffected"
      },
      {
        "version": "9.11.16",
        "status": "unaffected"
      },
      {
        "version": "10.8.1",
        "status": "unaffected"
      },
      {
        "version": "10.7.3",
        "status": "unaffected"
      },
      {
        "version": "10.6.6",
        "status": "unaffected"
      }
    ]
  }
]