Mattermost Server Sensitive Data Exposure

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-14457 · ADVISORY
• mattermost/mattermost#13848 · WEB
• mattermost/mattermost · PACKAGE
• mattermost.com/security-updates · WEB
• mattermost.com/security-updates · Vendor Advisory
• GitHub Advisory GHSA-j2h2-cvwh-cr64 · ADVISORY

github.com/mattermost/mattermost のその他の脆弱性

• CVE-2025-13324低 3.7Mattermost versions 10.11.x <= 10.11.5, 11.0.x <= 11.0.4, 10.12.x <= 10.12.2 fail to invalidate remote cluster invite tokens when using the …
• CVE-2025-62690中 6.1Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a…
• CVE-2025-13352低 3.0Mattermost versions 10.11.x <= 10.11.6 and Mattermost GitHub plugin versions <=2.4.0 fail to validate plugin bot identity in reaction forwar…
• CVE-2025-13870中 4.3Mattermost versions 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate the user permission when accessing the files and subscribing to t…
• CVE-2025-12756中 4.3Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate user permissions when delet…