Improper Authentication

Mattermost is vulnerable to improper authentication. The vulnerability is due to failure to validate plugin bot identity in reaction forwarding, which allows an attacker to hijack the GitHub reaction feature and make users add reactions to arbitrary GitHub objects via crafted notification posts...

SUSE CVE-2025-13352

Mattermost versions 10.11.x = 10.11.6 and Mattermost GitHub plugin versions =2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts...

CVE-2025-22208

creationtimestamp| type| source ---|---|--- 2025-02-15 08:16:24+00:00| seen| https://infosec.exchange/users/cve/statuses/114006909533850420 2025-02-15 09:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li7ey2sdt42g 2025-02-15 10:11:05+00:00| seen|...

CVE-2025-26558

creationtimestamp| type| source ---|---|--- 2025-02-13 14:17:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2uvaqrz72g 2025-02-13 14:26:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113997038213697231 2025-02-13 15:12:24+00:00| seen|...

CVE-2025-25147

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlepojmem2a 2025-02-07 12:08:45+00:00| seen| https://t.me/cvedetector/17483 2025-02-07 12:53:52+00:00| seen|...

CVE-2024-13651

creationtimestamp| type| source ---|---|--- 2025-02-01 04:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3nph5r7z2p 2025-02-01 05:25:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3710 2025-02-01 07:16:25+00:00| seen|...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost that stems from improper validation of post types, allowing an attacker to deny service to some users by creating posts with the customplnotification type...