API - API Security Blog

CVE-2025-3302

creation_timestamp| type| source ---|---|--- 2025-06-11 15:02:55+00:00| seen|...Read More ...

June 11, 2025

CVE-2025-35941

creation_timestamp| type| source ---|---|--- 2025-06-11 13:58:51+00:00| seen|...Read More ...

June 11, 2025

CVE-2024-39001

creation_timestamp| type| source ---|---|--- 2025-06-11 15:29:00+00:00| seen|...Read More ...

June 11, 2025

CVE-2024-22363

creation_timestamp| type| source ---|---|--- 2025-06-11 15:29:00+00:00| seen|...Read More ...

June 11, 2025

Mattermost allows guest users to view information about public teams they are not members of

Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about pu ...

June 11, 2025

Mattermost allows authenticated administrator to execute LDAP search filter injection

Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated ad ...

June 11, 2025

CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability

Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about pu ...

June 11, 2025

CVE-2025-4573 LDAP Injection in Mattermost Enterprise Edition When Using Active Directory

Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated ad ...

June 11, 2025