CVE-2025-6233CWE-22

Arbitrary file read by system admin via path traversal

Medium · published July 18, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
37.8
In the wild
Unconfirmed
What it is

Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-07-18T09:09Z
EPSS history
Timeline
  • 18 JUL 09:09Z
    Arbitrary file read by system admin via path traversal
    cvelistv5