CVE-2025-9079
published 2025-09-19CVE-2025-9079: Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to validate import directory path…
PriorityP348high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
0.60%
45.0th percentile
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to validate import directory path configuration which allows admin users to execute arbitrary code via malicious plugin upload to prepackaged plugins directory
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | mattermost_mattermost-server | >= 10.10.0 < 10.10.2 | 10.10.2 |
| github.com | mattermost_mattermost-server | >= 10.10.0+incompatible < 10.10.2+incompatible | 10.10.2+incompatible |
| github.com | mattermost_mattermost-server | >= 10.5.0 < 10.5.9 | 10.5.9 |
| github.com | mattermost_mattermost-server | >= 10.5.0+incompatible < 10.5.9+incompatible | 10.5.9+incompatible |
| github.com | mattermost_mattermost-server | >= 10.8.0 < 10.8.4 | 10.8.4 |
| github.com | mattermost_mattermost-server | >= 10.8.0+incompatible < 10.8.4+incompatible | 10.8.4+incompatible |
| github.com | mattermost_mattermost-server | >= 10.9.0 < 10.9.4 | 10.9.4 |
| github.com | mattermost_mattermost-server | >= 10.9.0+incompatible < 10.9.4+incompatible | 10.9.4+incompatible |
| github.com | mattermost_mattermost-server | >= 9.11.0 < 9.11.18 | 9.11.18 |
| github.com | mattermost_mattermost-server | >= 9.11.0+incompatible < 9.11.18+incompatible | 9.11.18+incompatible |
| github.com | mattermost_mattermost_server_v8 | >= 0 < 8.0.0-20250707221302-a8fa77f107ef | 8.0.0-20250707221302-a8fa77f107ef |
| mattermost | mattermost | 10.10.0 – 10.10.1 | — |
| mattermost | mattermost | 10.5.0 – 10.5.8 | — |
| mattermost | mattermost | 10.8.0 – 10.8.3 | — |
| mattermost | mattermost | 10.9.0 – 10.9.3 | — |
| mattermost | mattermost | 9.11.0 – 9.11.17 | — |
| mattermost | mattermost_server | >= 10.10.0 < 10.10.2 | 10.10.2 |
| mattermost | mattermost_server | >= 10.5.0 < 10.5.9 | 10.5.9 |
| mattermost | mattermost_server | >= 10.8.0 < 10.8.4 | 10.8.4 |
| mattermost | mattermost_server | >= 10.9.0 < 10.9.4 | 10.9.4 |
| mattermost | mattermost_server | >= 9.11.0 < 9.11.18 | 9.11.18 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Mattermost Path Traversal vulnerability in github.com/mattermost/mattermost-server
osv·2025-09-24
CVE-2025-9079 Mattermost Path Traversal vulnerability in github.com/mattermost/mattermost-server
Mattermost Path Traversal vulnerability in github.com/mattermost/mattermost-server
Mattermost Path Traversal vulnerability in github.com/mattermost/mattermost-server
GHSA
Mattermost Path Traversal vulnerability
ghsa·2025-09-19
CVE-2025-9079 [HIGH] CWE-22 Mattermost Path Traversal vulnerability
Mattermost Path Traversal vulnerability
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to validate import directory path configuration which allows admin users to execute arbitrary code via malicious plugin upload to prepackaged plugins directory
OSV
Mattermost Path Traversal vulnerability
osv·2025-09-19
CVE-2025-9079 [HIGH] Mattermost Path Traversal vulnerability
Mattermost Path Traversal vulnerability
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to validate import directory path configuration which allows admin users to execute arbitrary code via malicious plugin upload to prepackaged plugins directory
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-21962 kernel: cifs: Fix integer overflow while processing closetimeo mount option
bugzilla·2025-04-01·CVSS 5.5
CVE-2025-21962 [MEDIUM] CVE-2025-21962 kernel: cifs: Fix integer overflow while processing closetimeo mount option
CVE-2025-21962 kernel: cifs: Fix integer overflow while processing closetimeo mount option
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix integer overflow while processing closetimeo mount option
User-provided mount parameter closetimeo of type u32 is intended to have
an upper limit, but before it is validated, the value is converted from
seconds to jiffies which can lead to an integer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21962-9f86@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2025:9079 https://access.redhat.com/errata/RHSA-2025:9079
---
This issue has bee
Bugzilla
CVE-2025-21963 kernel: cifs: Fix integer overflow while processing acdirmax mount option
bugzilla·2025-04-01·CVSS 5.5
CVE-2025-21963 [MEDIUM] CVE-2025-21963 kernel: cifs: Fix integer overflow while processing acdirmax mount option
CVE-2025-21963 kernel: cifs: Fix integer overflow while processing acdirmax mount option
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix integer overflow while processing acdirmax mount option
User-provided mount parameter acdirmax of type u32 is intended to have
an upper limit, but before it is validated, the value is converted from
seconds to jiffies which can lead to an integer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025040145-CVE-2025-21963-6e21@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2025:9079 https://access.redhat.com/errata/RHSA-2025:9079
---
This issue has been addr
Bugzilla
CVE-2025-21764 kernel: ndisc: use RCU protection in ndisc_alloc_skb()
bugzilla·2025-02-27·CVSS 7.8
CVE-2025-21764 [HIGH] CVE-2025-21764 kernel: ndisc: use RCU protection in ndisc_alloc_skb()
CVE-2025-21764 kernel: ndisc: use RCU protection in ndisc_alloc_skb()
In the Linux kernel, the following vulnerability has been resolved:
ndisc: use RCU protection in ndisc_alloc_skb()
ndisc_alloc_skb() can be called without RTNL or RCU being held.
Add RCU protection to avoid possible UAF.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022605-CVE-2025-21764-1061@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:8333 https://access.redhat.com/errata/RHSA-2025:8333
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2025:9079 https://access.redhat.com/errata/RHSA-2025:9079
---
This issue has been addressed in the following products:
Red Ha
2025-09-19
Published