VYPR
← All advisories
Critical severity9.6NVD Advisory· Published Feb 24, 2025· Updated Jun 17, 2026

CVE-2025-24490

CVE-2025-24490

Description

Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to use prepared statements in the SQL query of boards reordering which allows an attacker to retrieve data from the database, via a SQL injection when reordering specially crafted boards categories.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Mattermost/Mattermost3 versions
    cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*range: >=9.11.0,<9.11.8
    • (no CPE)range: <=10.4.1, <=9.11.7, <=10.3.2, <=10.2.2
    • (no CPE)range: 10.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.