EUVD-2025-4376

Malicious code in bioql PyPI...

CVE-2025-24490

Mattermost versions 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to use prepared statements in the SQL query of boards reordering which allows an attacker to retrieve data from the database, via a SQL injection when reordering specially crafted boards categories...

CVE-2025-24490

Mattermost versions 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to use prepared statements in the SQL query of boards reordering which allows an attacker to retrieve data from the database, via a SQL injection when reordering specially crafted boards categories...

CVE-2025-24490

Mattermost contains a SQL injection vulnerability (CVE-2025-24490) caused by not using prepared statements in the SQL query used for boards reordering. Affected versions include 9.11.x <= 9.11.7, 10.2.x <= 10.2.2, 10.3.x <= 10.3.2, and 10.4.x

CVE-2025-24490: Improper Neutralization of Special Elements used in an SQL Command

Mattermost versions 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to use prepared statements in the SQL query of boards reordering which allows an attacker to retrieve data from the database, via a SQL injection when reordering specially crafted boards categories...