https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:06:40 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0614 certfr-2025-avi-0614 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0614 https://cve.radiocsirt.org/vuln/euvd-2026-250322 EUVD-2026-250322 https://cve.radiocsirt.org/vuln/euvd-2026-250322 https://cve.radiocsirt.org/vuln/fkie_cve-2025-36530 <p>Mattermost versions 10.9.x &lt;= 10.9.1, 10.8.x &lt;= 10.8.3, 10.5.x &lt;= 10.5.8, 9.11.x &lt;= 9.11.17 fail to properly validate file paths during plugin import operations which allows restricted admin users to install unauthorized custom plugins via path traversal in the import functionality, bypassing plugin signature enforcement and marketplace restrictions.</p> <p>Mattermost versions 10.9.x &lt;= 10.9.1, 10.8.x &lt;= 10.8.3, 10.5.x &lt;= 10.5.8, 9.11.x &lt;= 9.11.17 fail to properly validate file paths during plugin import operations which allows restricted admin users to install unauthorized custom plugins via path traversal in the import functionality, bypassing plugin signature enforcement and marketplace restrictions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-36530 https://cve.radiocsirt.org/vuln/ghsa-gq3r-5833-5532 <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server/v5, Go: github.com/mattermost/mattermost-server/v6</p> <p>Mattermost versions 10.9.x &lt;= 10.9.1, 10.8.x &lt;= 10.8.3, 10.5.x &lt;= 10.5.8, 9.11.x &lt;= 9.11.17 fail to properly validate file paths during plugin import operations which allows restricted admin users to install unauthorized custom plugins via path traversal in the import functionality, bypassing plugin signature enforcement and marketplace restrictions.</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server/v5, Go: github.com/mattermost/mattermost-server/v6</p> <p>Mattermost versions 10.9.x &lt;= 10.9.1, 10.8.x &lt;= 10.8.3, 10.5.x &lt;= 10.5.8, 9.11.x &lt;= 9.11.17 fail to properly validate file paths during plugin import operations which allows restricted admin users to install unauthorized custom plugins via path traversal in the import functionality, bypassing plugin signature enforcement and marketplace restrictions.</p> https://cve.radiocsirt.org/vuln/ghsa-gq3r-5833-5532 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1625 <p>Ein authentifizierter Angreifer mit bestimmten Berechtigungen kann diese Schwachstellen ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebige Dateien in das Dateisystem einzubringen und potenziell beliebigen Code auszuführen.</p> <p>Ein authentifizierter Angreifer mit bestimmten Berechtigungen kann diese Schwachstellen ausnutzen, um Sicherheitsmechanismen zu umgehen, beliebige Dateien in das Dateisystem einzubringen und potenziell beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1625