Description
Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate board blocks when importing boards which allows an attacker could read any arbitrary file on the system via importing and exporting a specially crafted import archive in Boards.
INFO
Published Date :
2025-02-24T07:25:26.792Z
Last Modified :
2025-02-24T11:22:50.849Z
Source :
Mattermost
AFFECTED PRODUCTS
The following products are affected by CVE-2025-25279 vulnerability.
| Vendors | Products |
|---|---|
| Mattermost |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-25279.
| URL | Resource |
|---|---|
| https://mattermost.com/security-updates |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact