Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-32093

Опубликовано: 14 апр. 2025
Источник: debian
EPSS Низкий

Описание

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to restrict certain operations on system admins to only other system admins, which allows delegated granular administration users with the "Edit Other Users" permission to perform unauthorized modifications to system administrators via improper permission validation.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mattermost-serveritppackage

EPSS

Процентиль: 20%
0.00063
Низкий

Связанные уязвимости

CVSS3: 4.7
nvd
10 месяцев назад

Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to restrict certain operations on system admins to only other system admins, which allows delegated granular administration users with the "Edit Other Users" permission to perform unauthorized modifications to system administrators via improper permission validation.

CVSS3: 4.7
github
10 месяцев назад

Mattermost Fails to Restrict Certain Operations on System Admins

EPSS

Процентиль: 20%
0.00063
Низкий