Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:34:56 +0000 bdu:2025-16337 https://cve.radiocsirt.org/vuln/bdu:2025-16337 bdu:2025-16337 https://cve.radiocsirt.org/vuln/bdu:2025-16337 EUVD-2026-263830 https://cve.radiocsirt.org/vuln/euvd-2026-263830 EUVD-2026-263830 https://cve.radiocsirt.org/vuln/euvd-2026-263830 fkie_cve-2025-62190 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62190 <p>Mattermost versions 11.0.x &lt;= 11.0.4, 10.12.x &lt;= 10.12.2, 10.11.x &lt;= 10.11.6 and Mattermost Calls versions &lt;=1.10.0 fail to implement CSRF protection on the Calls widget page which allows an authenticated attacker to initiate calls and inject messages into channels or direct messages via a malicious webpage or crafted link</p> <p>Mattermost versions 11.0.x &lt;= 11.0.4, 10.12.x &lt;= 10.12.2, 10.11.x &lt;= 10.11.6 and Mattermost Calls versions &lt;=1.10.0 fail to implement CSRF protection on the Calls widget page which allows an authenticated attacker to initiate calls and inject messages into channels or direct messages via a malicious webpage or crafted link</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62190 GHSA-gmx5-frv9-9m9f — Mattermost has CSRF vulnerability via Calls Widget page https://cve.radiocsirt.org/vuln/ghsa-gmx5-frv9-9m9f <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-plugin-calls</p> <p>Mattermost versions 11.0.x &lt; 11.0.4, 10.12.x &lt;= 10.12.2, 10.11.x &lt; 10.11.6 and Mattermost Calls versions &lt; 1.10.0 fail to implement CSRF protection on the Calls widget page which allows an authenticated attacker to initiate calls and inject messages into channels or direct messages via a malicious webpage or crafted link.</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost-plugin-calls</p> <p>Mattermost versions 11.0.x &lt; 11.0.4, 10.12.x &lt;= 10.12.2, 10.11.x &lt; 10.11.6 and Mattermost Calls versions &lt; 1.10.0 fail to implement CSRF protection on the Calls widget page which allows an authenticated attacker to initiate calls and inject messages into channels or direct messages via a malicious webpage or crafted link.</p> https://cve.radiocsirt.org/vuln/ghsa-gmx5-frv9-9m9f