Количество 3
Количество 3
CVE-2025-49222
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2, 10.10.x <= 10.10.0 fail to validate upload types in remote cluster upload sessions which allows a system admin to upload non-attachment file types via shared channels that could potentially be placed in arbitrary filesystem directories.
CVE-2025-49222
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11 ...
GHSA-q453-638c-h4mr
Mattermost Fails to Validate Remote Cluster Upload Sessions
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-49222 Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2, 10.10.x <= 10.10.0 fail to validate upload types in remote cluster upload sessions which allows a system admin to upload non-attachment file types via shared channels that could potentially be placed in arbitrary filesystem directories. | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
| CVE-2025-49222 Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11 ... | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
| GHSA-q453-638c-h4mr Mattermost Fails to Validate Remote Cluster Upload Sessions | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу