https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:56:34.082834+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-6233 CVE-2025-6233 — Arbitrary file read by system admin via path traversal 2026-10-07T16:56:34.099849+00:00

Affected: Mattermost

Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal.