Количество 3
Количество 3
CVE-2025-2570
Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have access to `ExperimentalSettings` which allows a System Manager to access `ExperimentSettings` when `RestrictSystemAdmin` is true via System Console.
CVE-2025-2570
Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check ...
GHSA-fpff-wj6m-grvr
Mattermost Fails to Check User Access to `ExperimentalSettings`
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-2570 Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have access to `ExperimentalSettings` which allows a System Manager to access `ExperimentSettings` when `RestrictSystemAdmin` is true via System Console. | CVSS3: 2.7 | 0% Низкий | больше 1 года назад |
| CVE-2025-2570 Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check ... | CVSS3: 2.7 | 0% Низкий | больше 1 года назад |
| GHSA-fpff-wj6m-grvr Mattermost Fails to Check User Access to `ExperimentalSettings` | CVSS3: 2.7 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу