{"metadata": {"vulnerability": "cve-2025-4981", "count": 28, "kinds": {"milestone": 5, "sighting": 10, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-05-20T06:57:13.788Z", "date_only": false, "value": "2025-05-20T06:57:13.788Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-4981", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-20T10:27:13.471Z", "date_only": false, "value": "2025-06-20T10:27:13.471Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-4981", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-20T10:29:47.620Z", "date_only": false, "value": "2025-06-20T10:29:47.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Mattermost", "record": "cve-2025-4981", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-20T10:44:16Z", "date_only": false, "value": "2025-06-20T10:44:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18927", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "58b9bdde-0185-4b87-85cd-1fc3b3411e43", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4981\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to sanitize filenames in the archive extractor which allows authenticated users to write files to arbitrary locations on the filesystem via uploading archives with path traversal sequences in filenames, potentially leading to remote code execution. The vulnerability impacts instances where file uploads and document search by content is enabled (FileSettings.EnableFileAttachments = true and FileSettings.ExtractContent = true). These configuration settings are enabled by default.\n\ud83d\udccf Published: 2025-06-20T10:27:13.471Z\n\ud83d\udccf Modified: 2025-06-20T10:29:47.620Z\n\ud83d\udd17 References:\n1. https://mattermost.com/security-updates", "url": "https://t.me/DarkWebInformer_CVEAlerts/18927"}, {"timestamp": "2025-06-20T11:15:20Z", "date_only": false, "value": "2025-06-20T11:15:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QH58-9V3J-WCJC", "record": "GHSA-QH58-9V3J-WCJC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-20T11:15:20.993Z", "date_only": false, "value": "2025-06-20T11:15:20.993", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4981", "record": "FKIE_CVE-2025-4981", "field": "published"}, {"timestamp": "2025-06-20T12:15:20.347Z", "date_only": false, "value": "2025-06-20T12:15:20.347639Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114715637785288887", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "ee5a6d36-e829-4353-9c16-3c9150e34da8", "url": "https://infosec.exchange/users/cR0w/statuses/114715637785288887"}, {"timestamp": "2025-06-20T12:30:53Z", "date_only": false, "value": "2025-06-20T12:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QH58-9V3J-WCJC", "record": "GHSA-QH58-9V3J-WCJC", "field": "published"}, {"timestamp": "2025-06-20T13:06:30.529Z", "date_only": false, "value": "2025-06-20T13:06:30.529064Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-4981", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-20T13:06:30.529Z", "date_only": false, "value": "2025-06-20T13:06:30.529064Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4981", "record": "FKIE_CVE-2025-4981", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-20T13:10:32.981Z", "date_only": false, "value": "2025-06-20T13:10:32.981Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-4981", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-20T13:10:32.981Z", "date_only": false, "value": "2025-06-20T13:10:32.981Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-4981", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-20T13:23:39.294Z", "date_only": false, "value": "2025-06-20T13:23:39.294558Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls254lukca2k", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "391101cc-f3de-46bb-9268-b5b301aa7811", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls254lukca2k"}, {"timestamp": "2025-06-20T16:38:01Z", "date_only": false, "value": "2025-06-20T16:38:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QH58-9V3J-WCJC", "record": "GHSA-QH58-9V3J-WCJC", "field": "modified"}, {"timestamp": "2025-06-21T03:29:28.947Z", "date_only": false, "value": "2025-06-21T03:29:28.947117Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ls3mf25kf22k", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "8a25df6e-5caf-4a09-baf8-24a6b1728bc2", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ls3mf25kf22k"}, {"timestamp": "2025-06-21T16:21:43.724Z", "date_only": false, "value": "2025-06-21T16:21:43.724376Z", "kind": "sighting", "label": "Seen", "source": "https://social.circl.lu/users/circl/statuses/114722268980174207", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "ad689ea8-bfab-40f3-a26a-b65b0c76202d", "url": "https://social.circl.lu/users/circl/statuses/114722268980174207"}, {"timestamp": "2025-06-22T02:26:25.836Z", "date_only": false, "value": "2025-06-22T02:26:25.836127Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ls5zd7y5mx2q", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "328af24a-32eb-4214-a0d3-cc223da244d3", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3ls5zd7y5mx2q"}, {"timestamp": "2025-06-25T14:57:30.438Z", "date_only": false, "value": "2025-06-25T14:57:30.438271Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lsguoylhow2z", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "118944d9-0350-4b20-a850-e1e0284e34f9", "url": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lsguoylhow2z"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15405-1", "record": "OPENSUSE-SU-2025:15405-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15405-1", "record": "OPENSUSE-SU-2025:15405-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15405-1", "record": "OPENSUSE-SU-2025:15405-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15405-1", "record": "OPENSUSE-SU-2025:15405-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-25T18:01:55.403Z", "date_only": false, "value": "2026-05-25T18:01:55.403379Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmp2qbrcqf2r", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "06118874-17dc-4e7e-b2d8-4f1d495a3bc1", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmp2qbrcqf2r"}, {"timestamp": "2026-06-17T09:34:26.060Z", "date_only": false, "value": "2026-06-17T09:34:26.060", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4981", "record": "FKIE_CVE-2025-4981", "field": "lastModified"}, {"timestamp": "2026-07-26T02:00:11.372Z", "date_only": false, "value": "2026-07-26T02:00:11.372089Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/861", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "09e793db-ad8f-4972-9f1e-e7819b032cfd", "url": "https://t.me/cyberwarehouse/861"}, {"timestamp": "2026-07-27T00:00:30.951Z", "date_only": false, "value": "2026-07-27T00:00:30.951784Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/861", "record": "CVE-2025-4981", "field": "creation_timestamp", "uuid": "1cf68968-0853-4599-bdd2-1d7bf20ef4e4", "url": "https://t.me/cyberwarehouse/861"}, {"timestamp": "2026-09-20T21:39:02Z", "date_only": false, "value": "2026-09-20T21:39:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15405-1", "record": "OPENSUSE-SU-2025:15405-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:39:02Z", "date_only": false, "value": "2026-09-20T21:39:02Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:15405-1", "record": "OPENSUSE-SU-2025:15405-1", "field": "document.tracking.current_release_date"}]}