API - API Security Blog

CVE-2025-3913 Team Privacy Settings Authorization Bypass in Mattermost Server

Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allow ...

May 29, 2025

CVE-2025-33043

creation_timestamp| type| source ---|---|--- 2025-05-29 15:13:57+00:00| seen|...Read More ...

May 29, 2025

CVE-2025-37999

creation_timestamp| type| source ---|---|--- 2025-05-29 13:51:01+00:00| seen|...Read More ...

May 29, 2025

CVE-2025-37996

creation_timestamp| type| source ---|---|--- 2025-05-29 13:51:01+00:00| seen|...Read More ...

May 29, 2025

CVE-2025-5320

creation_timestamp| type| source ---|---|--- 2025-05-29 15:13:58+00:00| seen|...Read More ...

May 29, 2025

CVE-2025-5320

creation_timestamp| type| source ---|---|--- 2025-05-29 15:13:58+00:00| seen|...Read More ...

May 29, 2025

CVE-2025-3913 Team Privacy Settings Authorization Bypass in Mattermost Server

Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allow ...

May 29, 2025

CVE-2025-37998

creation_timestamp| type| source ---|---|--- 2025-05-29 13:51:03+00:00| seen|...Read More ...

May 29, 2025