API - API Security Blog

CVE-2025-26412

creation_timestamp| type| source ---|---|--- 2025-06-11 11:07:44+00:00| seen|...Read More ...

June 11, 2025

CVE-2025-4315

creation_timestamp| type| source ---|---|--- 2025-06-11 11:27:45+00:00| seen|...Read More ...

June 11, 2025

CVE-2025-5991

creation_timestamp| type| source ---|---|--- 2025-06-11 11:22:45+00:00| seen|...Read More ...

June 11, 2025

CVE-2025-4573

Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated ad ...

June 11, 2025

CVE-2025-4128

Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about pu ...

June 11, 2025

CVE-2025-4573 LDAP Injection in Mattermost Enterprise Edition When Using Active Directory

Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated ad ...

June 11, 2025

CVE-2025-4573 LDAP Injection in Mattermost Enterprise Edition When Using Active Directory

Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated ad ...

June 11, 2025

CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability

Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information about pu ...

June 11, 2025