Low WID-SEC-2025-2715 1 CVE

Mattermost Server: Schwachstelle ermöglicht Offenlegung von Informationen

Published Dec 1, 2025 · Updated Dec 1, 2025 · de-DE

Vendor: Mattermost Product: Mattermost Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Mattermost Server ausnutzen, um Informationen offenzulegen.

Product

Mattermost ist ein webbasierter Instant-Messaging-Dienst.

Vulnerabilities 1

Low 3.1

CVE-2025-13870

Unauthorized access and subscription vulnerability in Boards

Mattermost versions 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate the user permission when accessing the files and subscribing to the block in Boards, which allows an authenticated user to access other board files and was able to subscribe to the blo…

Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go

Dec 2, 2025

Revision history

2025-12-01 #1
Initiale Fassung

References

Mattermost Security Updates vom 2025-12-01
https://mattermost.com/security-updates/
CVE Record vom 2025-12-01
https://www.cve.org/CVERecord?id=CVE-2025-13870