← CVE Intelligence

CVE-2025-24526

Channel export permitted on archived channel when viewing archived channels is disabled PUBLISHED

Description (CNA)

Mattermost versions 10.1.x <= 10.1.3, 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to restrict channel export of archived channels when the "Allow users to view archived channels" is disabled which allows a user to export channel contents when they shouldn't have access to it

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 10.1.0 through 10.1.3; affected 10.4.0 through 10.4.1; affected 9.11.0 through 9.11.7; affected 10.3.0 through 10.3.2; affected 10.2.0 through 10.2.2; unaffected 10.5.0; unaffected 10.1.4; unaffected 10.4.2; unaffected 9.11.8; unaffected 10.3.3; unaffected 10.2.3

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.