CVE-2025-2424
Leaked Metadata of Deleted Files via Bookmark Creation
Résumé
Leaked Metadata of Deleted Files via Bookmark Creation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to check if a file has been deleted when creating a bookmark which allows an attacker who knows the IDs of deleted files to obtain metadata of the files via bookmark creation.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Go
github.com/mattermost/mattermost/server/v8
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.0.0-20250213231113-68c11e9ecb71"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web github.com
- web mattermost.com
- web pkg.go.dev