CVE-2025-9078
Weak cache keys lead to post IDOR and link preview poisoning
Résumé
Weak cache keys lead to post IDOR and link preview poisoning
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to properly validate cache keys for link metadata which allows authenticated users to access unauthorized posts and poison link previews via hash collision attacks on FNV-1 hashing
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com