Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/05/30 2:22 p.m.38 views

CVE-2025-3611 Improper Access Control in Mattermost allows System Managers to view team details despite role restrictions

Mattermost versions 10.7.x = 10.7.0, 10.5.x = 10.5.3, 9.11.x = 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated users with System Manager privileges to view team details they should not have access to via direct API requests to team...

3.1CVSS0.00191EPSS
SaveExploits0References1
Rows per page
Query Builder