Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2025/06/11 10:25 a.m.37 views

CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability

Mattermost versions 10.5.x = 10.5.4, 9.11.x = 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about public teams they are not members of via a direct API call to /api/v4/teams/teamid...

3.1CVSS0.00186EPSS
SaveExploits0References1
Rows per page
Query Builder