CVE-2025-24920
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 21, 2025
Updated: Mar 27, 2025
CWE ID 863
Summary
CVE-2025-24920 is a vulnerability affecting Mattermost versions 10.4.x up to 10.4.2, 10.3.x up to 10.3.3, 9.11.x up to 9.11.8, and 10.5.x up to 10.5.0. This issue permits authenticated users to create or update bookmarks in archived channels, despite the lack of restriction. Consequently, an attacker with access to an archived channel may manipulate bookmarks for potential security breaches or data theft. This vulnerability poses a risk to data confidentiality and integrity within the affected Mattermost installations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mattermost Server
Affected Vendors
- Mattermost, Inc.