CVE-2025-1472 — Unauthorized View Access to Site Statistics and Team Statistics
Mattermost versions 9.11.x <= 9.11.8 fail to properly perform authorization of the Viewer role which allows an attacker with the Viewer role configured with No Access to Reporti…
Published: 2025-03-19 · CVSS: 4.3 · CVSS 3.1
Mattermost versions 9.11.x <= 9.11.8 fail to properly perform authorization of the Viewer role which allows an attacker with the Viewer role configured with No Access to Reporting to still view team and site statistics.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7