Security Advisory

CVE-2025-41443

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-16 08:10:40

Last updated 2025-10-29 08:06:29

Assigner Mattermost

CVSS score 4.3

State PUBLISHED

Description

Mattermost versions 10.5.x <= 10.5.12, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when accessing channel information which allows guest users to discover active public channels and their metadata via the `/api/v4/teams/{team_id}/channels/ids` endpoint

← Browse all CVEs View on cve.org ↗