Cyber Posture

CVE-2025-20051

Critical

Published: 24 February 2025

Published
24 February 2025
Modified
18 August 2025
KEV Added
Patch
CVSS Score 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0025 48.4th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Description

Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted block in Boards.

Security Summary

CVE-2025-20051 affects Mattermost versions 10.4.x up to and including 10.4.1, 9.11.x up to 9.11.7, 10.3.x up to 10.3.2, and 10.2.x up to 10.2.2. The vulnerability arises from a failure to properly validate input during patching and duplicating operations in the Boards feature, classified under CWE-22 (path traversal). This allows an attacker to read arbitrary files on the system by duplicating a specially crafted block. It carries a CVSS v3.1 base score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), marking it as critical.

Exploitation requires an authenticated user with low privileges (PR:L) and can be performed remotely over the network (AV:N) with low complexity (AC:L) and no user interaction (UI:N). The attack has a high scope change (S:C), enabling severe impacts including high confidentiality loss through arbitrary file reads, as well as high integrity and availability disruptions (C:H/I:H/A:H).

Mattermost advisories provide further details on patches and mitigation at https://mattermost.com/security-updates. The CVE was published on 2025-02-24T08:15:10.087.

Details

CWE(s)
CWE-22

Affected Products

mattermost
mattermost server
9.11.0 — 9.11.8 · 10.2.0 — 10.2.3 · 10.3.0 — 10.3.3

References