CVE-2025-54499

Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...

CVE-2025-54499

Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...

CVE-2025-54499

Mattermost CVE-2025-54499 affects Mattermost Server 10.5.x (≤10.5.10) and 10.11.x (≤10.11.2). The root cause is non-constant-time comparison for sensitive strings, enabling timing-based side-channel attacks that could reveal Cloud API keys and OAuth client secrets. Connected advisories also link ...

CVE-2025-54499 Insecure string comparison enables timing attacks

Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...

CVE-2025-54499 Insecure string comparison enables timing attacks

Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...

EUVD-2010-5038

Malware in sbrugna...

EUVD-2020-24270

Malware in sbrugna...

EUVD-2010-0948

Malware in sbrugna...

EUVD-2018-0707

Malware in sbrugna...

EUVD-2018-17177

Malware in sbrugna...

EUVD-2011-0922

Malware in sbrugna...

EUVD-2003-1552

Malware in sbrugna...

EUVD-2019-0757

Malware in sbrugna...

EUVD-2020-9430

Malware in sbrugna...

EUVD-2020-5073

Malware in sbrugna...

EUVD-2021-1963

Malware in sbrugna...

EUVD-2021-23243

Malware in sbrugna...

EUVD-2021-0047

Malware in sbrugna...

EUVD-2005-1799

Malware in sbrugna...

EUVD-2005-0110

Malware in sbrugna...