Threats tagged 'ghsa-mqp8-pgg5-7x7m'

Mattermost server versions 10.11.0 through 10.11.3, 10.5.0 through 10.5.11, and 10.12.0 allow system administrators to access sensitive user data including password hashes and MFA secrets due to improper sanitization of user data in a specific API endpoint. This vulnerability is identified as CVE-2025-11794 and has a medium severity rating with a CVSS score of 4.9. Fixed versions are available and users are advised to upgrade to these versions to mitigate the risk.