VDB
BDU%3A2025-16337
BDU%3A2025-16337
PUBLISHED
CVSS 5 MEDIUM
Уязвимость функции handleServeStandalone() плагина Mattermost Calls приложения для обмена мгновенными сообщениями Mattermost, позволяющая нарушителю осуществить CSRF-атаку
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mattermost Inc | Mattermost, Mattermost Calls |
Timeline
- Dec 25, 2025 CVE Published
References
- https://mattermost.com/security-updates url
- https://github.com/mattermost/mattermost-plugin-calls/pull/1085 url
- https://github.com/mattermost/mattermost-plugin-calls/pull/1085/commits/b6188d2b1e4a2fcd1c8476c8cb546cc9260a9f55 url
- https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.11.0 advisory
- https://github.com/mattermost/mattermost-plugin-calls/commit/429cfaf2a301a369414d1ca18a3364e85901c8d1 advisory
- https://github.com/mattermost/mattermost/releases advisory