CVE-2025-20051
Arbitrary file read via block duplication in Mattermost Boards
Résumé
Arbitrary file read via block duplication in Mattermost Boards
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted block in Boards.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com