CVE-2025-2424 in Mattermost정보

요약

\~에 의해 MITRE • 2025. 04. 14.

Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to check if a file has been deleted when creating a bookmark which allows an attacker who knows the IDs of deleted files to obtain metadata of the files via bookmark creation.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

Mattermost

예약하다

2025. 03. 17.

공개

2025. 04. 14.

모더레이션

수락

항목

VDB-304652

CPE

준비됨

CWE

CWE-863 (확인됨)

CVSS

3.1 (CNA)

EPSS

0.00225

KEV

아니요

활동

매우 낮음

부문

Hospital, Telecommunication, ...

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-2424
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-2424
CVE Details	https://www.cvedetails.com/cve/CVE-2025-2424/

◂ 이전 개요 다음 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!