CVE-2025-41423 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

CVE-2025-41423

Mattermost versions 10.4.x = 10.4.2, 10.5.x = 10.5.0, 9.11.x = 9.11.10 fail to properly validate permissions for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread, allowing any user or attacker to delete posts containing actions created by the Playbooks bot, even without...

CVE-2025-41423

creationtimestamp| type| source ---|---|--- 2025-04-24 09:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkenuxsgc2s 2025-04-24 11:23:20+00:00| seen| https://t.me/cvedetector/23650...

CVE-2025-41423 Unauthorized Playbooks Post Deletion in Mattermost Playbooks Plugin

Mattermost versions 10.4.x = 10.4.2, 10.5.x = 10.5.0, 9.11.x = 9.11.10 fail to properly validate permissions for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread, allowing any user or attacker to delete posts containing actions created by the Playbooks bot, even without...