1 matches found
CVE-2025-2564: Incorrect Authorization
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which allows authenticated users to view members and member information of archived channels even when this setting is disabled...
4.3CVSS5.5AI score0.0028EPSS
SaveExploits0References1
20