CVE-2025-24920
Unauthorized Bookmark Creation and Modification in Archived Channels
Résumé
Unauthorized Bookmark Creation and Modification in Archived Channels
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8, 10.5.x <= 10.5.0 fail to restrict bookmark creation and updates in archived channels, which allows authenticated users created or update bookmarked in archived channels
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com