CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.1. See the original NVD description below for full technical details.
CVE
CVE-2025-0503
Severity
LOW
CVSS
3.1
EPSS
0.24%
Original NVD Description
Mattermost versions 9.11.x <= 9.11.6 fail to filter out DMs from the deleted channels endpoint which allows an attacker to infer user IDs and other metadata from deleted DMs if someone had manually marked DMs as deleted in the database.
Related CVEs
Other vulnerabilities affecting the same vendor(s)