CVE-2025-47700
AI plugin APIs can be triggered using post actions
Résumé
AI plugin APIs can be triggered using post actions
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Server versions 10.5.x <= 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com