https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:23:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11487 bdu:2025-11487 https://cve.radiocsirt.org/vuln/bdu:2025-11487 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0707 certfr-2025-avi-0707 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0707 https://cve.radiocsirt.org/vuln/cnvd-2025-22091 cnvd-2025-22091 https://cve.radiocsirt.org/vuln/cnvd-2025-22091 https://cve.radiocsirt.org/vuln/euvd-2026-252613 EUVD-2026-252613 https://cve.radiocsirt.org/vuln/euvd-2026-252613 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9072 <p>Mattermost versions 10.10.x &lt;= 10.10.1, 10.5.x &lt;= 10.5.9, 10.9.x &lt;= 10.9.4 fail to validate the redirect_to parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL.</p> <p>Mattermost versions 10.10.x &lt;= 10.10.1, 10.5.x &lt;= 10.5.9, 10.9.x &lt;= 10.9.4 fail to validate the redirect_to parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-9072 https://cve.radiocsirt.org/vuln/ghsa-69j8-prx2-vx98 <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8</p> <p>Mattermost versions 10.10.x &lt;= 10.10.1, 10.5.x &lt;= 10.5.9, 10.9.x &lt;= 10.9.4 fail to validate the redirect_to parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL.</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost/server/v8</p> <p>Mattermost versions 10.10.x &lt;= 10.10.1, 10.5.x &lt;= 10.5.9, 10.9.x &lt;= 10.9.4 fail to validate the redirect_to parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL.</p> https://cve.radiocsirt.org/vuln/ghsa-69j8-prx2-vx98 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15564-1 <p>govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15564-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1856 <p>Ein Angreifer kann mehrere Schwachstellen in Mattermost Server ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Mattermost Server ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1856