CVE-2025-0503
Leaked User IDs and Metadata of Deleted DMs
概要
Leaked User IDs and Metadata of Deleted DMs
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost versions 9.11.x <= 9.11.6 fail to filter out DMs from the deleted channels endpoint which allows an attacker to infer user IDs and other metadata from deleted DMs if someone had manually marked DMs as deleted in the database.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com