AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-20088

MEDIUM · CVSS 6.5 EPSS 0.55%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-01-15 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. Exploitation may require the attacker to be authenticated.

CVE
CVE-2025-20088
Severity
MEDIUM
CVSS
6.5
EPSS
0.55%

Original NVD Description

Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.

Related CVEs

Other vulnerabilities affecting the same vendor(s)