Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:42:52 +0000 certfr-2025-avi-1122 — De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer de… https://cve.radiocsirt.org/vuln/certfr-2025-avi-1122 certfr-2025-avi-1122 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1122 EUVD-2026-264357 https://cve.radiocsirt.org/vuln/euvd-2026-264357 EUVD-2026-264357 https://cve.radiocsirt.org/vuln/euvd-2026-264357 fkie_cve-2025-64641 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64641 <p>Mattermost versions 11.1.x &lt;= 11.1.0, 11.0.x &lt;= 11.0.5, 10.12.x &lt;= 10.12.3, 10.11.x &lt;= 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affected posts</p> <p>Mattermost versions 11.1.x &lt;= 11.1.0, 11.0.x &lt;= 11.0.5, 10.12.x &lt;= 10.12.3, 10.11.x &lt;= 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affected posts</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-64641 GHSA-vww6-79rv-3j4x — Mattermost doesn't verify that post actions invoking `/share-issue-publicly` were created by the Jira plugin https://cve.radiocsirt.org/vuln/ghsa-vww6-79rv-3j4x <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server</p> <p>Mattermost versions 11.1.x &lt;= 11.1.0, 11.0.x &lt;= 11.0.5, 10.12.x &lt;= 10.12.3, 10.11.x &lt;= 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affected posts</p> <p><strong>Affected:</strong> Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost-server</p> <p>Mattermost versions 11.1.x &lt;= 11.1.0, 11.0.x &lt;= 11.0.5, 10.12.x &lt;= 10.12.3, 10.11.x &lt;= 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affected posts</p> https://cve.radiocsirt.org/vuln/ghsa-vww6-79rv-3j4x WID-SEC-W-2025-2685 — Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2685 <p>Ein Angreifer kann eine Schwachstelle in Mattermost ausnutzen, um Informationen offenzulegen.</p> <p>Ein Angreifer kann eine Schwachstelle in Mattermost ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2685