CVE-2025-3228 | BDVDB-2026-283227 Detail

Description#

Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly retrieve requestorInfo from playbooks handler for guest users which allows an attacker access to the playbook run.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-06-20Record published in the CVE List.
2. Version 22025-06-23Most recent update recorded in the CVE List.