CalvinBackup/CVEs-PoC
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-06-03 12:58:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
4e4e30233e70832d643d5c6ab6fbfa6f130b4bb1
CVEs-PoC/2025/CVE-2025-6227.md
T
0xMarcio cb00e1339f Update CVE list 2025-09-29 21:09
2025-09-29 21:09:30 +02:00

979 B
Raw Blame History

CVE-2025-6227

Description

Mattermost versions 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to send synchronization payloads to the server that originally created the invite via the REST API.

POC

Reference

Github

Reference in New Issue View Git Blame Copy Permalink