CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.2. See the original NVD description below for full technical details.
CVE
CVE-2025-2571
Severity
MEDIUM
CVSS
4.2
EPSS
0.18%
Original NVD Description
Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to gain unauthorized access to bot accounts via the Google OAuth signup flow.
Related CVEs
Other vulnerabilities affecting the same vendor(s)