CVE-2025-30179 in Mattermost

요약 (영어)

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to enforce MFA on certain search APIs, which allows authenticated attackers to bypass MFA protections via user search, channel search, or team search queries.

책임이 있는

Mattermost

예약하다

2025. 03. 20.

공개

2025. 03. 21.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
300579	Mattermost MFA 권한 상승	863	정의되지 않음	공식 수정	CVE-2025-30179