Most recent entries from all

cnvd-2025-12761

EUVD-2026-239572

fkie_cve-2025-2570

Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have access to `ExperimentalSettings` which allows a System Manager to access `ExperimentSettings` when `RestrictSystemAdmin` is true via System Console.

GHSA-fpff-wj6m-grvr — Mattermost Fails to Check User Access to `ExperimentalSettings`

Affected: Go: github.com/mattermost/mattermost/server/v8

Mattermost versions 10.5.x <= 10.5.2, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have access to `ExperimentalSettings` which allows a System Manager to access `ExperimentSettings` when `RestrictSystemAdmin` is true via System Console.

openSUSE-SU-2025:15159-1 — govulncheck-vulndb-0.0.20250523T151856-1.1 on GA media

govulncheck-vulndb-0.0.20250523T151856-1.1 on GA media

WID-SEC-W-2025-0830 — Mattermost: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder einen Denial of Service zu verursachen.