Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-32093

Опубликовано: 14 апр. 2025
Источник: debian
EPSS Низкий

Описание

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to restrict certain operations on system admins to only other system admins, which allows delegated granular administration users with the "Edit Other Users" permission to perform unauthorized modifications to system administrators via improper permission validation.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mattermost-serveritppackage

EPSS

Процентиль: 10%
0.00198
Низкий

Связанные уязвимости

CVSS3: 4.7
nvd
больше 1 года назад

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to restrict certain operations on system admins to only other system admins, which allows delegated granular administration users with the "Edit Other Users" permission to perform unauthorized modifications to system administrators via improper permission validation.

CVSS3: 4.7
github
больше 1 года назад

Mattermost Fails to Restrict Certain Operations on System Admins

EPSS

Процентиль: 10%
0.00198
Низкий