CVE-2025-20088
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 15, 2025
CWE ID 1287
Summary
CVE-2025-20088 is a vulnerability affecting Mattermost versions 10.2.x up to 10.2.0, 9.11.x up to 9.11.5, 10.0.x up to 10.0.3, and 10.1.x up to 10.1.3. This issue arises due to the software's failure to validate post props properly. A malicious authenticated user can exploit this vulnerability by crafting a malicious post, resulting in a crash. Unpatched installations are at risk, making it essential for users to update their Mattermost servers as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mattermost Server
Affected Vendors
- Mattermost, Inc.