2 matches found
GHSA-PJ6F-RC94-GW53 Mattermost Fails to Sanitize File Names
Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 10.10.x = 10.10.0, 10.9.x = 10.9.3 fail to sanitize file names which allows users with file upload permission to overwrite file attachment thumbnails via path traversal in file streaming APIs...
4.3CVSS7AI score0.00765EPSS
SaveExploits0References4
CVE-2025-6465
Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 10.10.x = 10.10.0, 10.9.x = 10.9.3 fail to sanitize file names which allows users with file upload permission to overwrite file attachment thumbnails via path traversal in file streaming APIs...
5.3CVSS0.00765EPSS
SaveExploits0References6
20