CVE-2025-1472
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 19, 2025
CWE ID 863
Summary
CVE-2025-1472 is a vulnerability affecting Mattermost versions 9.11.x up to 9.11.8. The issue lies in the inadequate authorization of the Viewer role, which grants individuals with this role and "No Access to Reporting" permission the ability to view team and site statistics, despite the restriction. This oversight poses a risk, as unintended users could access sensitive statistical data, potentially leading to privacy concerns or data leakage.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.