CVE-2025-27933 in Mattermost
Résumé (Anglaise)
Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to fail to enforce channel conversion restrictions, which allows members with permission to convert public channels to private ones to also convert private ones to public
Responsable
Mattermost
Réserver
20/03/2025
Divulgation
21/03/2025
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 300578 | Mattermost Channel Conversion élévation de privilèges | 863 | Non défini | Correctif officiel | CVE-2025-27933 |