CVE-2025-22445
Misleading UI for undefined admin console settings in Calls causes security confusion
Summary
Misleading UI for undefined admin console settings in Calls causes security confusion
Original description
The description as published by the source.
Mattermost versions 10.x <= 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com