CVE-2025-2571
4.2MEDIUMMattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to
Publicado: 5/30/2025Atualizado: 10/15/2025
Descrição
Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to gain unauthorized access to bot accounts via the Google OAuth signup flow.
Análise IADesenvolvido por IA
Produtos Afetados
mattermostmattermost_server
mattermostmattermost_server
mattermostmattermost_server
mattermostmattermost_server
Referências
- https://mattermost.com/security-updatesVendor Advisory