CNNVD-202512-263 Information

CNNVD ID

CNNVD-202512-263

CVE-2025-13870

  • CNNVD Published: 2025-12-02

Description (Chinese)

Mattermost是美国Mattermost公司的一个开源协作平台。 Mattermost 10.11.4及之前的10.11.x版本和10.5.12及之前的10.5.x版本存在安全漏洞,该漏洞源于未验证用户权限,可能导致认证用户访问其他面板文件。

Description (English)

Mattermost is an open-source collaborative platform for Mattermost in the United States. There is a security loophole in Mattermost 10.11.4 and previous versions 10.11.x and 10.5.12 and earlier versions 10.5.x, which stems from the lack of authentication of user privileges and may result in authentication users accessing other panel files.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Mattermost

Published

2025-12-02

Last Modified

2026-02-24

References

https://mattermost.com/security-updates

Patch

https://mattermost.com/security-updates/

Share on: