Lucene search
+L

4 matches found

OSV
OSV
added 2025/06/11 10:25 a.m.10 views

CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability

Mattermost versions 10.5.x = 10.5.4, 9.11.x = 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about public teams they are not members of via a direct API call to /api/v4/teams/teamid...

3.1CVSS5.9AI score0.00186EPSS
SaveExploits0References3
Rows per page
Query Builder