CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-2564
Severity
MEDIUM
CVSS
4.3
EPSS
0.27%
Original NVD Description
Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which allows authenticated users to view members and member information of archived channels even when this setting is disabled.
Related CVEs
Other vulnerabilities affecting the same vendor(s)