CyberRota
← Ana sayfaya dön

CVE-2026-3473

MEDIUM · CVSS 5.9 EPSS %0.15

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-22T11:16:22.477 · Çekilme zamanı: 2026-06-20T12:03:38.700258+00:00

CyberRota Yorumu

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-3473
Severity
MEDIUM
CVSS
5.9
EPSS
%0.15

Orijinal NVD Açıklaması

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authenticated user to access and download files belonging to other users or teams via crafted Boards API requests using valid file IDs.. Mattermost Advisory ID: MMSA-2026-00620