deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-5115
Published: 2025-08-20
Description: In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state, therefore forcing the server to consume resources such as CPU and memory.


For example, a client can open a stream and then send WINDOW_UPDATE frames with window size increment of 0, which is illegal.
Per specification  https://www.rfc-editor.org/rfc/rfc9113.html#name-window_update , the server should send a RST_STREAM frame.
The client can now open another stream and send another bad WINDOW_UPDATE, therefore causing the server to consume more resources than necessary, as this case does not exceed the max number of concurrent streams, yet the client is able to create an enormous amount of streams in a short period of time.


The attack can be performed with other conditions (for example, a DATA frame for a closed stream) that cause the server to send a RST_STREAM frame.



Links:



  *   https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/jetty/jetty.project/pull/13449; https://github.com/jetty/jetty.project/releases/tag/jetty-10.0.26; https://github.com/jetty/jetty.project/releases/tag/jetty-11.0.26
CVE: CVE-2025-9241
Published: 2025-08-20
Description: A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-1236
References: https://github.com/elunez/eladmin/issues/886; https://github.com/elunez/eladmin/issues/886#issue[PII_REDACTED]; https://vuldb.com/?ctiid.320774
CVE: CVE-2025-9244
Published: 2025-08-20
Description: A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function addStaticRoute of the file /goform/addStaticRoute. Such manipulation of the argument staticRoute_IP_setting/staticRoute_Netmask_setting/staticRoute_Gateway_setting/staticRoute_Metric_setting/staticRoute_destType_setting leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_11/11.md; https://vuldb.com/?ctiid.320775; https://vuldb.com/?id.320775
CVE: CVE-2025-9245
Published: 2025-08-20
Description: A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function WPSSTAPINEnr of the file /goform/WPSSTAPINEnr. Performing manipulation of the argument ssid results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_14/14.md; https://vuldb.com/?ctiid.320776; https://vuldb.com/?id.320776
CVE: CVE-2025-9246
Published: 2025-08-20
Description: A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Impacted is the function check_port_conflict of the file /goform/check_port_conflict. Executing manipulation of the argument single_port_rule/port_range_rule can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_15/15.md; https://vuldb.com/?ctiid.320777; https://vuldb.com/?id.320777
CVE: CVE-2024-57155
Published: 2025-08-20
Description: Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://github.com/wfh45678/radar/issues/100
CVE: CVE-2025-9247
Published: 2025-08-20
Description: A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The affected element is the function setVlan of the file /goform/setVlan. The manipulation of the argument vlan_set leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_16/16.md; https://vuldb.com/?ctiid.320778; https://vuldb.com/?id.320778
CVE: CVE-2025-9248
Published: 2025-08-20
Description: A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RP_pingGatewayByBBS of the file /goform/RP_pingGatewayByBBS. The manipulation of the argument ssidhex results in stack-based buffer overflow. The attack may be performed from a remote location. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_17/17.md; https://vuldb.com/?ctiid.320779; https://vuldb.com/?id.320779
CVE: CVE-2025-9249
Published: 2025-08-20
Description: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function DHCPReserveAddGroup of the file /goform/DHCPReserveAddGroup. This manipulation of the argument enable_group/name_group/ip_group/mac_group causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_18/18.md; https://vuldb.com/?ctiid.320780; https://vuldb.com/?id.320780
CVE: CVE-2025-57749
Published: 2025-08-20
Description: n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Write File node in n8n. While the node attempts to restrict access to sensitive directories and files, it does not properly account for symbolic links (symlinks). An attacker with the ability to create symlinks—such as by using the Execute Command node—could exploit this to bypass the intended directory restrictions and read from or write to otherwise inaccessible paths. Users of n8n.cloud are not impacted. Affected users should update to version 1.106.0 or later.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-59
References: https://github.com/n8n-io/n8n/pull/17735; https://github.com/n8n-io/n8n/security/advisories/GHSA-ggjm-f3g4-rwmm
CVE: CVE-2025-9250
Published: 2025-08-20
Description: A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This impacts the function setPWDbyBBS of the file /goform/setPWDbyBBS. Such manipulation of the argument hint leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_19/19.md; https://vuldb.com/?ctiid.320781; https://vuldb.com/?id.320781
CVE: CVE-2025-9251
Published: 2025-08-20
Description: A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function sta_wps_pin of the file /goform/sta_wps_pin. Performing manipulation of the argument Ssid results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_20/20.md; https://vuldb.com/?ctiid.320782; https://vuldb.com/?id.320782
CVE: CVE-2025-9252
Published: 2025-08-20
Description: A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function DisablePasswordAlertRedirect of the file /goform/DisablePasswordAlertRedirect. Executing manipulation of the argument hint can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_21/21.md; https://vuldb.com/?ctiid.320783; https://vuldb.com/?id.320783
CVE: CVE-2025-9287
Published: 2025-08-20
Description: Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://github.com/browserify/cipher-base/pull/23; https://github.com/browserify/cipher-base/security/advisories/GHSA-cpq7-6gpm-g9rc; https://lists.debian.org/debian-lts-announce/2025/09/msg00005.html
CVE: CVE-2025-9288
Published: 2025-08-20
Description: Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://github.com/browserify/sha.js/pull/78; https://github.com/browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5; https://www.cve.org/CVERecord?id=CVE-2025-9287
CVE: CVE-2025-9253
Published: 2025-08-20
Description: A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function RP_doSpecifySiteSurvey of the file /goform/RP_doSpecifySiteSurvey. The manipulation of the argument ssidhex leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_22/22.md; https://vuldb.com/?ctiid.320784; https://vuldb.com/?id.320784
CVE: CVE-2025-9262
Published: 2025-08-20
Description: A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity. The exploitability is told to be difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-77, CWE-78, CWE-78
References: https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e; https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e#proof-of-concept; https://vuldb.com/?ctiid.320804
CVE: CVE-2025-9263
Published: 2025-08-20
Description: A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-99, CWE-639
References: https://github.com/xuxueli/xxl-job/issues/3772; https://github.com/xuxueli/xxl-job/issues/3772#issue[PII_REDACTED]; https://vuldb.com/?ctiid.320805
CVE: CVE-2025-9264
Published: 2025-08-21
Description: A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argument ID results in improper control of resource identifiers. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-99, CWE-639
References: https://github.com/xuxueli/xxl-job/issues/3773; https://github.com/xuxueli/xxl-job/issues/3773#issue[PII_REDACTED]; https://vuldb.com/?ctiid.320806
CVE: CVE-2025-24285
Published: 2025-08-21
Description: Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV Station Lite.
 
Affected Products:
UniFi Connect EV Station Lite (Version 1.5.1 and earlier)
 
Mitigation:
Update UniFi Connect EV Station Lite to Version 1.5.2 or later
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6
CVE: CVE-2025-27213
Published: 2025-08-21
Description: An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system.

 

Affected Products:

UniFi Connect EV Station Pro (Version 1.5.18 and earlier)
UniFi Connect Display (Version 1.9.324 and earlier)
UniFi Connect Display Cast (Version 1.9.301 and earlier)
UniFi Connect Display Cast Pro (Version 1.0.78 and earlier)
UniFi Connect Display Cast Lite (Version 1.0.3 and earlier)

Mitigation:

Update UniFi Connect EV Station Pro to Version 1.5.27 or later
Update UniFi Connect Display to Version 1.13.6 or later
Update UniFi Connect Display Cast to Version 1.10.3 or later
Update UniFi Connect Display Cast Pro to Version 1.0.83 or later
Update UniFi Connect Display Cast Lite to Version 1.1.3 or later
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-863
References: https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6
CVE: CVE-2025-27214
Published: 2025-08-21
Description: A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset.

 

Affected Products:

UniFi Connect EV Station Pro (Version 1.5.18 and earlier)

 

Mitigation:

Update UniFi Connect EV Station Pro to Version 1.5.27 or later
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6
CVE: CVE-2025-27215
Published: 2025-08-21
Description: An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect Display Cast devices to make unsupported changes to the system.

 

Affected Products:

UniFi Connect Display Cast (Version 1.10.3 and earlier)
UniFi Connect Display Cast Pro (Version 1.0.89 and earlier)
UniFi Connect Display Cast Lite (Version 1.0.3 and earlier)

 

Mitigation:

Update UniFi Connect Display Cast to Version 1.10.7 or later
Update UniFi Connect Display Cast Pro to Version 1.0.94 or later
Update UniFi Connect Display Cast Lite to Version 1.1.8 or later
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6
CVE: CVE-2025-27216
Published: 2025-08-21
Description: Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://community.ui.com/releases/Security-Advisory-Bulletin-053/b0c4aa38-90aa-412d-b5b9-6395e057d822
CVE: CVE-2025-27217
Published: 2025-08-21
Description: A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://community.ui.com/releases/UISP-Application-2-4-220/b428b276-c4a6-4b90-b97b-1860ff2bb46d
CVE: CVE-2025-43300
Published: 2025-08-21
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/124925; https://support.apple.com/en-us/124926; https://support.apple.com/en-us/124927
CVE: CVE-2025-48978
Published: 2025-08-21
Description: An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.11.0 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network.

Affected Products:

EdgeMAX EdgeSwitch (Version 1.11.0 and earlier) 

  

Mitigation:

Update the EdgeMAX EdgeSwitch to Version 1.11.1 or later.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://community.ui.com/releases/Security-Advisory-Bulletin-054-054/3033f0b7-aca6-4d70-8c51-d3e706bd0ca7
CVE: CVE-2025-48355
Published: 2025-08-21
Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof provesource allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through <= 3.1.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://patchstack.com/database/Wordpress/Plugin/provesource/vulnerability/wordpress-provesource-social-proof-plugin-3-0-5-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2025-53504
Published: 2025-08-21
Description: Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN72111431/; https://www.group-office.com/
CVE: CVE-2025-53505
Published: 2025-08-21
Description: Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a path traversal vulnerability. If this vulnerability is exploited, information on the server hosting the product may be exposed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN72111431/; https://www.group-office.com/
CVE: CVE-2025-7221
Published: 2025-08-21
Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the give_update_payment_status() function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers, with GiveWP Worker-level access and above, to update donations statuses. This ability is not present in the user interface.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/give/trunk/includes/payments/functions.php#L339; https://plugins.trac.wordpress.org/changeset/3333090/give; https://www.wordfence.com/threat-intel/vulnerabilities/id/8766608e-df72-4b9d-a301-a50c64fadc9a?source=cve
CVE: CVE-2025-7390
Published: 2025-08-21
Description: A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-7390.html; https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-7390.json
CVE: CVE-2025-8592
Published: 2025-08-21
Description: The Inspiro theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2. This is due to missing or incorrect nonce validation on the inspiro_install_plugin() function. This makes it possible for unauthenticated attackers to install plugins from the repository via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://research.cleantalk.org/cve-2025-8592/; https://themes.trac.wordpress.org/browser/inspiro/2.1.1/inc/admin/pluginInstaller/class-inspiro-plugin-installer.php#L67; https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=284043%40inspiro%2F2.1.3&old=282419%40inspiro%2F2.1.2
CVE: CVE-2025-8607
Published: 2025-08-21
Description: The SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block's attributes in all versions up to, and including, 1.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3347030%40slingblocks%2Ftrunk&old=3275990%40slingblocks%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/c88c6ad8-d4bd-4785-a6e7-e5034c58158b?source=cve
CVE: CVE-2025-36530
Published: 2025-08-21
Description: Mattermost versions 10.9.x <= 10.9.1, 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate file paths during plugin import operations which allows restricted admin users to install unauthorized custom plugins via path traversal in the import functionality, bypassing plugin signature enforcement and marketplace restrictions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://mattermost.com/security-updates
CVE: CVE-2025-47700
Published: 2025-08-21
Description: Mattermost Server versions 10.5.x <= 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions
CVSS Score: 3.5 (LOW)
CWE: CWE-918
References: https://mattermost.com/security-updates
CVE: CVE-2025-47870
Published: 2025-08-21
Description: Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2 fail to sanitize the team invite ID in the  POST /api/v4/teams/:teamId/restore endpoint which allows an team admin with no member invite privileges to get the team’s invite id.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-306
References: https://mattermost.com/security-updates