Vulnerability-Lookup

CVE-2025-6233 (GCVE-0-2025-6233)

Vulnerability from cvelistv5 – Published: 2025-07-18 09:09 – Updated: 2025-07-18 12:30

Title

Arbitrary file read by system admin via path traversal

Summary

Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal.

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-18 11:37 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

Mattermost CNA under the mitre root

CNA scorecard B 80/100 over 130 records in the last 180 days details

References

1 reference

URL	Tags
https://mattermost.com/security-updates

Impacted products

1 product

Vendor	Product	Version	CPE status
Mattermost	Mattermost	Affected: 10.8.0 , ≤ 10.8.1 (semver) Affected: 10.7.0 , ≤ 10.7.3 (semver) Affected: 10.5.0 , ≤ 10.5.7 (semver) Affected: 9.11.0 , ≤ 9.11.16 (semver) Unaffected: 10.9.0 Unaffected: 10.8.2 Unaffected: 10.7.4 Unaffected: 10.5.8 Unaffected: 9.11.17	guessed

Credits

Dawid Kulikowski (daw10)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-6233",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-18T11:37:41.545711Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-18T12:30:35.494Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Mattermost",
          "vendor": "Mattermost",
          "versions": [
            {
              "lessThanOrEqual": "10.8.1",
              "status": "affected",
              "version": "10.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.7.3",
              "status": "affected",
              "version": "10.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.5.7",
              "status": "affected",
              "version": "10.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.11.16",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "10.9.0"
            },
            {
              "status": "unaffected",
              "version": "10.8.2"
            },
            {
              "status": "unaffected",
              "version": "10.7.4"
            },
            {
              "status": "unaffected",
              "version": "10.5.8"
            },
            {
              "status": "unaffected",
              "version": "9.11.17"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Dawid Kulikowski (daw10)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Mattermost versions 10.8.x \u003c= 10.8.1, 10.7.x \u003c= 10.7.3, 10.5.x \u003c= 10.5.7, 9.11.x \u003c= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-18T09:09:22.809Z",
        "orgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee",
        "shortName": "Mattermost"
      },
      "references": [
        {
          "url": "https://mattermost.com/security-updates"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update Mattermost to versions 10.9.0, 10.8.2, 10.7.4, 10.5.8, 9.11.17 or higher."
        }
      ],
      "source": {
        "advisory": "MMSA-2025-00494",
        "defect": [
          "https://mattermost.atlassian.net/browse/MM-64401"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Arbitrary file read by system admin via path traversal"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee",
    "assignerShortName": "Mattermost",
    "cveId": "CVE-2025-6233",
    "datePublished": "2025-07-18T09:09:22.809Z",
    "dateReserved": "2025-06-18T13:06:31.030Z",
    "dateUpdated": "2025-07-18T12:30:35.494Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-6233",
      "date": "2026-11-04",
      "epss": "0.00446",
      "percentile": "0.38923"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Mattermost",
                "vendor": "Mattermost",
                "versions": [
                  {
                    "lessThanOrEqual": "10.8.1",
                    "status": "affected",
                    "version": "10.8.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "10.7.3",
                    "status": "affected",
                    "version": "10.7.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "10.5.7",
                    "status": "affected",
                    "version": "10.5.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "9.11.16",
                    "status": "affected",
                    "version": "9.11.0",
                    "versionType": "semver"
                  },
                  {
                    "status": "unaffected",
                    "version": "10.9.0"
                  },
                  {
                    "status": "unaffected",
                    "version": "10.8.2"
                  },
                  {
                    "status": "unaffected",
                    "version": "10.7.4"
                  },
                  {
                    "status": "unaffected",
                    "version": "10.5.8"
                  },
                  {
                    "status": "unaffected",
                    "version": "9.11.17"
                  }
                ]
              }
            ],
            "source": "responsibledisclosure@mattermost.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3F117291-CF45-4790-8BEB-E51DB0BAEF82",
                    "versionEndExcluding": "9.11.17",
                    "versionStartIncluding": "9.11.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "86CE4B65-61C3-4994-88AB-06AC79F92965",
                    "versionEndExcluding": "10.5.8",
                    "versionStartIncluding": "10.5.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "16C5891E-6981-4903-A57E-A7AF4FDE2D1B",
                    "versionEndExcluding": "10.7.4",
                    "versionStartIncluding": "10.7.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7B0956AE-D67B-4FC3-98A8-67DD6904A90F",
                    "versionEndExcluding": "10.8.2",
                    "versionStartIncluding": "10.8.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Mattermost versions 10.8.x \u003c= 10.8.1, 10.7.x \u003c= 10.7.3, 10.5.x \u003c= 10.5.7, 9.11.x \u003c= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal."
          },
          {
            "lang": "es",
            "value": "Las versiones de Mattermost 10.8.x \u0026lt;= 10.8.1, 10.7.x \u0026lt;= 10.7.3, 10.5.x \u0026lt;= 10.5.7, 9.11.x \u0026lt;= 9.11.16 no logran depurar las rutas de entrada de los archivos adjuntos en el archivo JSONL de importaci\u00f3n masiva, lo que permite que un administrador del sistema lea archivos de sistema arbitrarios a trav\u00e9s del path traversal."
          }
        ],
        "id": "CVE-2025-6233",
        "lastModified": "2026-06-17T10:01:25.833",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.3,
              "impactScore": 4.0,
              "source": "responsibledisclosure@mattermost.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 4.9,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.2,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-6233",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-18T11:37:41.545711Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-07-18T10:15:34.940",
        "references": [
          {
            "source": "responsibledisclosure@mattermost.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://mattermost.com/security-updates"
          }
        ],
        "sourceIdentifier": "responsibledisclosure@mattermost.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-22"
              }
            ],
            "source": "responsibledisclosure@mattermost.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-07-20T09:59:29+00:00",
      "cve": "CVE-2025-6233",
      "id": "CVE-2025-6233",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Arbitrary file read by system admin via path traversal",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6233.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-6233",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-07-18T11:37:41.545711Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-07-18T11:37:49.030Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Mattermost",
              "vendor": "Mattermost",
              "versions": [
                {
                  "lessThanOrEqual": "10.8.1",
                  "status": "affected",
                  "version": "10.8.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.3",
                  "status": "affected",
                  "version": "10.7.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.5.7",
                  "status": "affected",
                  "version": "10.5.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "9.11.16",
                  "status": "affected",
                  "version": "9.11.0",
                  "versionType": "semver"
                },
                {
                  "status": "unaffected",
                  "version": "10.9.0"
                },
                {
                  "status": "unaffected",
                  "version": "10.8.2"
                },
                {
                  "status": "unaffected",
                  "version": "10.7.4"
                },
                {
                  "status": "unaffected",
                  "version": "10.5.8"
                },
                {
                  "status": "unaffected",
                  "version": "9.11.17"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Dawid Kulikowski (daw10)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Mattermost versions 10.8.x \u003c= 10.8.1, 10.7.x \u003c= 10.7.3, 10.5.x \u003c= 10.5.7, 9.11.x \u003c= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-22",
                  "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-07-18T09:09:22.809Z",
            "orgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee",
            "shortName": "Mattermost"
          },
          "references": [
            {
              "url": "https://mattermost.com/security-updates"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Update Mattermost to versions 10.9.0, 10.8.2, 10.7.4, 10.5.8, 9.11.17 or higher."
            }
          ],
          "source": {
            "advisory": "MMSA-2025-00494",
            "defect": [
              "https://mattermost.atlassian.net/browse/MM-64401"
            ],
            "discovery": "EXTERNAL"
          },
          "title": "Arbitrary file read by system admin via path traversal"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "9302f53e-dde5-4bf3-b2f2-a83f91ac0eee",
        "assignerShortName": "Mattermost",
        "cveId": "CVE-2025-6233",
        "datePublished": "2025-07-18T09:09:22.809Z",
        "dateReserved": "2025-06-18T13:06:31.030Z",
        "dateUpdated": "2025-07-18T12:30:35.494Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2025-AVI-0525

Vulnerability from certfr_avis - Published: 2025-06-19 - Updated: 2025-08-19

De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Mattermost	Mattermost Server	Mattermost Server versions 9.11.x antérieures à 9.11.17
Mattermost	Mattermost Server	Mattermost Server versions 10.7.x antérieures à 10.7.4
Mattermost	Mattermost Server	Mattermost Server versions 10.5.x antérieures à 10.5.8
Mattermost	Mattermost Server	Mattermost Server versions 10.8.x antérieures à 10.8.2

References

Title

Publication Time

FKIE_CVE-2025-6233

Vulnerability from fkie_nvd - Published: 2025-07-18 10:15 - Updated: 2026-06-17 10:01

Severity

6.8 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Summary

References

	URL	Tags
	responsibledisclosure@mattermost.com	https://mattermost.com/security-updates	Vendor Advisory

Impacted products

Vendor	Product	Version
mattermost	mattermost_server	*
mattermost	mattermost_server	*
mattermost	mattermost_server	*
mattermost	mattermost_server	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Mattermost",
          "vendor": "Mattermost",
          "versions": [
            {
              "lessThanOrEqual": "10.8.1",
              "status": "affected",
              "version": "10.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.7.3",
              "status": "affected",
              "version": "10.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.5.7",
              "status": "affected",
              "version": "10.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.11.16",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "10.9.0"
            },
            {
              "status": "unaffected",
              "version": "10.8.2"
            },
            {
              "status": "unaffected",
              "version": "10.7.4"
            },
            {
              "status": "unaffected",
              "version": "10.5.8"
            },
            {
              "status": "unaffected",
              "version": "9.11.17"
            }
          ]
        }
      ],
      "source": "responsibledisclosure@mattermost.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F117291-CF45-4790-8BEB-E51DB0BAEF82",
              "versionEndExcluding": "9.11.17",
              "versionStartIncluding": "9.11.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "86CE4B65-61C3-4994-88AB-06AC79F92965",
              "versionEndExcluding": "10.5.8",
              "versionStartIncluding": "10.5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "16C5891E-6981-4903-A57E-A7AF4FDE2D1B",
              "versionEndExcluding": "10.7.4",
              "versionStartIncluding": "10.7.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B0956AE-D67B-4FC3-98A8-67DD6904A90F",
              "versionEndExcluding": "10.8.2",
              "versionStartIncluding": "10.8.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Mattermost versions 10.8.x \u003c= 10.8.1, 10.7.x \u003c= 10.7.3, 10.5.x \u003c= 10.5.7, 9.11.x \u003c= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal."
    },
    {
      "lang": "es",
      "value": "Las versiones de Mattermost 10.8.x \u0026lt;= 10.8.1, 10.7.x \u0026lt;= 10.7.3, 10.5.x \u0026lt;= 10.5.7, 9.11.x \u0026lt;= 9.11.16 no logran depurar las rutas de entrada de los archivos adjuntos en el archivo JSONL de importaci\u00f3n masiva, lo que permite que un administrador del sistema lea archivos de sistema arbitrarios a trav\u00e9s del path traversal."
    }
  ],
  "id": "CVE-2025-6233",
  "lastModified": "2026-06-17T10:01:25.833",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 4.0,
        "source": "responsibledisclosure@mattermost.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.9,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-6233",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-07-18T11:37:41.545711Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-07-18T10:15:34.940",
  "references": [
    {
      "source": "responsibledisclosure@mattermost.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://mattermost.com/security-updates"
    }
  ],
  "sourceIdentifier": "responsibledisclosure@mattermost.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "responsibledisclosure@mattermost.com",
      "type": "Secondary"
    }
  ]
}

GHSA-WVW2-3JH4-4C39

Vulnerability from github – Published: 2025-07-18 12:30 – Updated: 2025-07-21 18:39

Summary

Mattermost Path Traversal vulnerability

Details

Severity

6.8 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/mattermost/mattermost-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "10.8.0"
            },
            {
              "fixed": "10.8.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/mattermost/mattermost-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "10.7.0"
            },
            {
              "fixed": "10.7.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/mattermost/mattermost-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "10.5.0"
            },
            {
              "fixed": "10.5.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/mattermost/mattermost-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "9.11.0"
            },
            {
              "fixed": "9.11.17"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/mattermost/mattermost/server/v8"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.0-20250529054450-d38c27f96fcf"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2025-6233"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2025-07-21T18:39:07Z",
    "nvd_published_at": "2025-07-18T10:15:34Z",
    "severity": "MODERATE"
  },
  "details": "Mattermost versions 10.8.x \u003c= 10.8.1, 10.7.x \u003c= 10.7.3, 10.5.x \u003c= 10.5.7, 9.11.x \u003c= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal.",
  "id": "GHSA-wvw2-3jh4-4c39",
  "modified": "2025-07-21T18:39:07Z",
  "published": "2025-07-18T12:30:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6233"
    },
    {
      "type": "WEB",
      "url": "https://github.com/mattermost/mattermost/commit/d38c27f96fcf754c36f231d1f2e9dbd48ad40bab"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/mattermost/mattermost"
    },
    {
      "type": "WEB",
      "url": "https://mattermost.com/security-updates"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Mattermost Path Traversal vulnerability"
}

OPENSUSE-SU-2025:15405-1

Vulnerability from csaf_opensuse - Published: 2025-08-04 00:00 - Updated: 2026-09-20 21:39

Summary

govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media

Severity

Moderate

Scope

56 vulnerabilities in this advisory, including CVE-2025-6233.

CVE-2025-6233

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Recommended: 4 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-6233 (GCVE-0-2025-6233)

CERTFR-2025-AVI-0525

Solutions

FKIE_CVE-2025-6233

GHSA-WVW2-3JH4-4C39

OPENSUSE-SU-2025:15405-1

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour