CNNVD-202512-4731 Information

CNNVD ID

CNNVD-202512-4731

CVE-2025-64641

  • CNNVD Published: 2025-12-24

Description (Chinese)

Mattermost是美国Mattermost公司的一个开源协作平台。 Mattermost 11.1.0及之前的11.1.x版本、11.0.5及之前的11.0.x版本、10.12.3及之前的10.12.x版本和10.11.7及之前的10.11.x版本存在安全漏洞,该漏洞源于未验证由Jira插件创建的操作,可能导致恶意用户渗漏Jira票据。

Description (English)

Mattermost is an open-source collaborative platform for Mattermost in the United States. Mattermust 11.1.0 and previous 11.1.x versions, 11.0.5 and previous 11.0.x versions, 10.12.3 and previous versions 10.12.x and 10.11.7 and previous versions 10.11.x have security gaps, which stem from unverified operations created by the Jira plugin and may lead to the leakage of the Jira instrument by malicious users.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Mattermost

Published

2025-12-24

Last Modified

2026-02-24

References

https://mattermost.com/security-updates https://access.redhat.com/security/cve/cve-2025-64641

Patch

https://mattermost.com/security-updates/

Share on: