CVE-2025-2564
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 16, 2025
Updated: Apr 17, 2025
CWE ID 863
Summary
CVE-2025-2564 is a vulnerability affecting Mattermost versions 10.5.x up to 10.5.1, 10.4.x up to 10.4.3, and 9.11.x up to 9.11.9. Despite the 'Allow users to view/update archived channels' System Console setting being disabled, authenticated users can still access member information of archived channels due to a failure in proper enforcement by the software.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mattermost Server
Affected Vendors
- Mattermost