Lucene search
+L

Improper Access Control

🗓️ 16 Sep 2025 12:40:05Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 15 Views

Mattermost server has improper access control enabling thread access via artificial intelligence posts missing validation.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2025-49810
21 Aug 202508:11
–circl
cnnvd
CNNVD
Mattermost security vulnerabilities
21 Aug 202500:00
–cnnvd
cve
CVE
CVE-2025-49810
21 Aug 202507:15
–cve
cvelist
Cvelist
CVE-2025-49810 Thread summarization allows persistent access to channel
21 Aug 202507:15
–cvelist
euvd
EUVD
EUVD-2025-25424
3 Oct 202520:07
–euvd
github
Github Security Blog
Mattermost Lack of Access Control Validation
21 Aug 202509:30
–github
nessus
Tenable Nessus
Mattermost Server 10.5.x < 10.5.9 / 10.10.0 Incorrect Authorization (MMSA-2025-00470)
12 Sep 202500:00
–nessus
mend
Mend
CVE-2025-49810
21 Aug 202507:15
–mend
nvd
NVD
CVE-2025-49810
21 Aug 202508:15
–nvd
osv_ghsa
osv_ghsa
GHSA-PWVR-GRQG-7VP2 Mattermost Lack of Access Control Validation
21 Aug 202509:30
–osv_ghsa
Rows per page
Vulners
Node
OR
microsoftwindows_server_2008Range8.0.0-20240619142046-8181a9ddffc0–8.0.0-20250721062209-4952acea88cego
microsoftwindows_server_2008Range0.0.0-20240209181221-674f549daf0e–8.0.0-20250721062209-4952acea88cego

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Aug 2026 07:38Current
6Medium risk
Vulners AI Score6
CVSS 3.13.5 - 4.3
EPSS0.00203
SSVC
15