API - API Security Blog

CVE-2025-47870 Team invite ID leaked to team admin with no member invite privileges

Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2 fail to sanitize the team invite ID in the POST /api/v4/teams/:teamId/restore e ...

August 21, 2025

CVE-2025-48355

creation_timestamp| type| source ---|---|--- 2025-08-21 06:15:38+00:00| seen|...Read More ...

August 21, 2025

CVE-2025-57826

creation_timestamp| type| source ---|---|--- 2025-08-21 06:13:08+00:00| seen|...Read More ...

August 21, 2025

CVE-2025-57825

creation_timestamp| type| source ---|---|--- 2025-08-21 06:28:29+00:00| seen|...Read More ...

August 21, 2025

CVE-2025-57832

creation_timestamp| type| source ---|---|--- 2025-08-21 06:24:43+00:00| seen|...Read More ...

August 21, 2025

CVE-2025-57828

creation_timestamp| type| source ---|---|--- 2025-08-21 06:21:23+00:00| seen|...Read More ...

August 21, 2025

CVE-2025-57831

creation_timestamp| type| source ---|---|--- 2025-08-21 06:18:22+00:00| seen|...Read More ...

August 21, 2025

CVE-2025-57830

creation_timestamp| type| source ---|---|--- 2025-08-21 06:47:47+00:00| seen|...Read More ...

August 21, 2025