API - API Security Blog

CVE-2025-1792 Improper Access Control in Mattermost Channel Member API

Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing channel member information, allowing a ...

May 30, 2025

CVE-2025-4988

creation_timestamp| type| source ---|---|--- 2025-05-30 14:29:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfgxxoxb7c2 2025-05-30 14:3 ...

May 30, 2025

CVE-2025-4944

creation_timestamp| type| source ---|---|--- 2025-05-30 12:37:17+00:00| seen|...Read More ...

May 30, 2025

CVE-2025-3611 Improper Access Control in Mattermost allows System Managers to view team details despite role restrictions

Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated us ...

May 30, 2025

CVE-2025-0602

creation_timestamp| type| source ---|---|--- 2025-05-30 14:29:28+00:00| seen|...Read More ...

May 30, 2025

GHSA-Q7P4-7XJV-J3WF

creation_timestamp| type| source ---|---|--- 2025-05-30 12:10:13+00:00| seen|...Read More ...

May 30, 2025

CVE-2025-4597

creation_timestamp| type| source ---|---|--- 2025-05-30 12:37:17+00:00| seen|...Read More ...

May 30, 2025

CVE-2025-4984

creation_timestamp| type| source ---|---|--- 2025-05-30 14:29:27+00:00| seen|...Read More ...

May 30, 2025