Mattermost: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• Critical 9.9
  CVE-2025-20051

  Arbitrary file read via block duplication in Mattermost Boards

  Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted …

  Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  Feb 24, 2025
• Critical 9.9
  CVE-2025-25279 Public exploit EPSS 24%

  Arbitrary file read in Mattermost Boards via import & export board archive

  Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate board blocks when importing boards which allows an attacker could read any arbitrary file on the system via importing and exporting a speciall…

  Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  Feb 24, 2025
• Critical 9.6
  CVE-2025-24490

  SQL Injection in Mattermost Boards via board category ID reordering

  Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to use prepared statements in the SQL query of boards reordering which allows an attacker to retrieve data from the database, via a SQL injection when reordering s…

  Mattermost Mattermost
  Feb 24, 2025
• Medium 4.3
  CVE-2025-24526

  Channel export permitted on archived channel when viewing archived channels is disabled

  Mattermost versions 10.1.x <= 10.1.3, 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to restrict channel export of archived channels when the "Allow users to view archived channels" is disabled which allows a user to export channe…

  Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  Feb 24, 2025
• Low 3.1
  CVE-2025-1412

  Session Persistence After User-to-Bot Conversion

  Mattermost versions 9.11.x <= 9.11.6, 10.4.x <= 10.4.1 fail to invalidate all active sessions when converting a user to a bot, with allows the converted user to escalate their privileges depending on the permissions granted to the bot.

  Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  Feb 24, 2025

Revision history

1. 2025-02-24 #3

   Beschreibungen und Bewertung aufgrund neuer Informationen angepasst

2. 2025-02-23 #2

   CVE's ergänzt

3. 2025-01-23 #1

   Initiale Fassung

References

• Mattermost Security Updates vom 2025-01-23
  https://mattermost.com/security-updates/#server