CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-8023

Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2 fails to sanitize path traversal sequences in template file destination paths, which allows a system admin to perform path traversal attacks via malicious path components, potentially enabling malicious file placement outside intended directories.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 10.8%

CVSS Severity

CVSS v3 Score 6.8

References

https://mattermost.com/security-updates

Products affected by CVE-2025-8023

Mattermost » Mattermost Server » Version: 10.5.0

cpe:2.3:a:mattermost:mattermost_server:10.5.0
Mattermost » Mattermost Server » Version: 10.5.1

cpe:2.3:a:mattermost:mattermost_server:10.5.1
Mattermost » Mattermost Server » Version: 10.5.2

cpe:2.3:a:mattermost:mattermost_server:10.5.2
Mattermost » Mattermost Server » Version: 10.5.3

cpe:2.3:a:mattermost:mattermost_server:10.5.3
Mattermost » Mattermost Server » Version: 10.5.4

cpe:2.3:a:mattermost:mattermost_server:10.5.4
Mattermost » Mattermost Server » Version: 10.5.5

cpe:2.3:a:mattermost:mattermost_server:10.5.5
Mattermost » Mattermost Server » Version: 10.5.6

cpe:2.3:a:mattermost:mattermost_server:10.5.6
Mattermost » Mattermost Server » Version: 10.5.7

cpe:2.3:a:mattermost:mattermost_server:10.5.7
Mattermost » Mattermost Server » Version: 10.5.8

cpe:2.3:a:mattermost:mattermost_server:10.5.8
Mattermost » Mattermost Server » Version: 10.8.0

cpe:2.3:a:mattermost:mattermost_server:10.8.0
Mattermost » Mattermost Server » Version: 10.8.1

cpe:2.3:a:mattermost:mattermost_server:10.8.1
Mattermost » Mattermost Server » Version: 10.8.2

cpe:2.3:a:mattermost:mattermost_server:10.8.2
Mattermost » Mattermost Server » Version: 10.8.3

cpe:2.3:a:mattermost:mattermost_server:10.8.3
Mattermost » Mattermost Server » Version: 10.9.0

cpe:2.3:a:mattermost:mattermost_server:10.9.0
Mattermost » Mattermost Server » Version: 10.9.1

cpe:2.3:a:mattermost:mattermost_server:10.9.1
Mattermost » Mattermost Server » Version: 10.9.2

cpe:2.3:a:mattermost:mattermost_server:10.9.2
Mattermost » Mattermost Server » Version: 9.11.0

cpe:2.3:a:mattermost:mattermost_server:9.11.0
Mattermost » Mattermost Server » Version: 9.11.1

cpe:2.3:a:mattermost:mattermost_server:9.11.1
Mattermost » Mattermost Server » Version: 9.11.10

cpe:2.3:a:mattermost:mattermost_server:9.11.10
Mattermost » Mattermost Server » Version: 9.11.11

cpe:2.3:a:mattermost:mattermost_server:9.11.11
Mattermost » Mattermost Server » Version: 9.11.12

cpe:2.3:a:mattermost:mattermost_server:9.11.12
Mattermost » Mattermost Server » Version: 9.11.13

cpe:2.3:a:mattermost:mattermost_server:9.11.13
Mattermost » Mattermost Server » Version: 9.11.14

cpe:2.3:a:mattermost:mattermost_server:9.11.14
Mattermost » Mattermost Server » Version: 9.11.15

cpe:2.3:a:mattermost:mattermost_server:9.11.15
Mattermost » Mattermost Server » Version: 9.11.16

cpe:2.3:a:mattermost:mattermost_server:9.11.16
Mattermost » Mattermost Server » Version: 9.11.17

cpe:2.3:a:mattermost:mattermost_server:9.11.17
Mattermost » Mattermost Server » Version: 9.11.2

cpe:2.3:a:mattermost:mattermost_server:9.11.2
Mattermost » Mattermost Server » Version: 9.11.3

cpe:2.3:a:mattermost:mattermost_server:9.11.3
Mattermost » Mattermost Server » Version: 9.11.4

cpe:2.3:a:mattermost:mattermost_server:9.11.4
Mattermost » Mattermost Server » Version: 9.11.5

cpe:2.3:a:mattermost:mattermost_server:9.11.5
Mattermost » Mattermost Server » Version: 9.11.6

cpe:2.3:a:mattermost:mattermost_server:9.11.6
Mattermost » Mattermost Server » Version: 9.11.7

cpe:2.3:a:mattermost:mattermost_server:9.11.7
Mattermost » Mattermost Server » Version: 9.11.8

cpe:2.3:a:mattermost:mattermost_server:9.11.8
Mattermost » Mattermost Server » Version: 9.11.9

cpe:2.3:a:mattermost:mattermost_server:9.11.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-8023

Products

Pricing

Contact Us