CVE-2025-20033 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

CVE-2025-20033

Mattermost versions 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post types, which allows attackers to deny service to users with the sysconsolereadplugins permission via creating a post with the customplnotification type and specific props...

CVE-2025-20033

creationtimestamp| type| source ---|---|--- 2025-01-09 06:57:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113797093449395295 2025-01-09 07:00:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113797106872432045 2025-01-09 07:16:16+00:00| seen|...

CVE-2025-20033 DoS via custom post type for sysconsole plugin readers

Mattermost versions 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post types, which allows attackers to deny service to users with the sysconsolereadplugins permission via creating a post with the customplnotification type and specific props...

CVE-2025-20033 DoS via custom post type for sysconsole plugin readers

Mattermost versions 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post types, which allows attackers to deny service to users with the sysconsolereadplugins permission via creating a post with the customplnotification type and specific props...