Lucene search
K

9 matches found

SUSE CVE
SUSE CVE
added 2025/12/12 12:25 a.m.3 views

SUSE CVE-2025-55074

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

3.5CVSS6.5AI score0.00145EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/11/26 10:55 p.m.2 views

CVE-2025-55074

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

3.5CVSS6.5AI score0.00145EPSS
Exploits0References1
OSV
OSV
added 2025/11/25 6:12 p.m.5 views

GO-2025-4133 Mattermost allows other users to determine when users had read channels via channel member objects in github.com/mattermost/mattermost-server

Mattermost allows other users to determine when users had read channels via channel member objects in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...

3.5CVSS6.6AI score0.00145EPSS
Exploits0References8
EUVD
EUVD
added 2025/11/18 6:32 p.m.6 views

EUVD-2025-198045

Mattermost allows other users to determine when users had read channels via channel member objects...

3CVSS6.3AI score0.00145EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2025/11/18 6:32 p.m.14 views

Mattermost allows other users to determine when users had read channels via channel member objects

Mattermost versions 10.11.x = 10.11.3, and 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

3.5CVSS6.5AI score0.00145EPSS
Exploits0References8Affected Software2
OSV
OSV
added 2025/11/18 6:32 p.m.5 views

GHSA-9HH7-6558-QFP2 Mattermost allows other users to determine when users had read channels via channel member objects

Mattermost versions 10.11.x = 10.11.3, and 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

3CVSS6.4AI score0.00145EPSS
Exploits0References9
Vulnrichment
Vulnrichment
added 2025/11/18 3:23 p.m.2 views

CVE-2025-55074 Channel member objects leak read status

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...

3CVSS6.4AI score0.00145EPSS
Exploits0References1
CVE
CVE
added 2025/11/18 3:23 p.m.17 views

CVE-2025-55074

Mattermost server (versions 10.11.x <= 10.11.3 and 10.5.x

3.5CVSS6.4AI score0.00145EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.10 views

PT-2025-47329

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.x through 10.5.11 Mattermost versions 10.11.x through 10.11.3 Description The Mattermost application does not properly enforce access permissions within the Agents plugin. This allows other users to determine when user...

3.5CVSS6.5AI score0.00145EPSS
Exploits0References12
Rows per page
Query Builder