Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/16 12:00 a.m.•1 views

CVE-2025-41443: Missing Authorization

Mattermost versions 10.5.x = 10.5.12, 10.11.x = 10.11.2 fail to properly validate guest user permissions when accessing channel information which allows guest users to discover active public channels and their metadata via the /api/v4/teams/teamid/channels/ids endpoint...

4.3CVSS5.7AI score0.00306EPSS
SaveExploits0References1
Rows per page
Query Builder