vulnerability

SUSE: CVE-2025-2424: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:M/Au:S/C:P/I:N/A:N)
Published
Apr 24, 2025
Added
Nov 4, 2025
Modified
Nov 4, 2025

Description

Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to check if a file has been deleted when creating a bookmark which allows an attacker who knows the IDs of deleted files to obtain metadata of the files via bookmark creation.

Solution

suse-upgrade-govulncheck-vulndb
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.