Vulnerabilities fixed in Mattermost

🗓️ 24 Feb 2025 12:04:19Reported by NCSCType

Mattermost fixed vulnerabilities including session invalidation, input validation, injection risks, and import issues.

Reporter	Title	Published	Views	Family All 107
GithubExploit	Exploit for Path Traversal in Mattermost Mattermost_Server	24 Apr 202614:36	–	githubexploit
BDU FSTEC	The vulnerability of the Mattermost instant messaging application, related to an incorrect restriction on the path to the restricted catalog, allows a intruder to gain unauthorized access to protected information.	28 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Mattermost instant messaging application, related to the failure to protect the SQL query structure, allows unauthorized access to the database.	28 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Mattermost instant messaging application, related to an incorrect restriction on the path to the restricted catalog, allows a intruder to gain unauthorized access to protected information.	28 Jul 202500:00	–	bdu_fstec
Chainguard	CVE-2025-1412 vulnerabilities	24 Feb 202508:15	–	cgr
Chainguard	CVE-2025-20051 vulnerabilities	24 Feb 202508:15	–	cgr
Chainguard	CVE-2025-24526 vulnerabilities	24 Feb 202508:15	–	cgr
Chainguard	CVE-2025-25279 vulnerabilities	24 Feb 202508:15	–	cgr
Circl	CVE-2025-1412	24 Feb 202510:26	–	circl
Circl	CVE-2025-20051	24 Feb 202509:30	–	circl