CVE-2025-25279
CRITICALMattermost <10.4.1-10.3.2-10.2.2 - Info Disclosure
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2025-25279. PoCs published by numanturle, AbokorMAHAMMADMOUSSE, Abokor-creator.
AI-analyzed exploit summary This repository provides a detailed writeup and HTTP request examples for CVE-2025-25279, an arbitrary file read vulnerability in Mattermost Boards. The exploit involves manipulating the fileId parameter during board block operations to access sensitive files.
Description
Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate board blocks when importing boards which allows an attacker could read any arbitrary file on the system via importing and exporting a specially crafted import archive in Boards.
Exploits (3)
This repository provides a detailed writeup and HTTP request examples for CVE-2025-25279, an arbitrary file read vulnerability in Mattermost Boards. The exploit involves manipulating the fileId parameter during board block operations to access sensitive files.
This repository contains a functional exploit for CVE-2025-25279, a path traversal vulnerability in Mattermost 10.4.1's Focalboard plugin. The exploit allows authenticated users to exfiltrate arbitrary files (e.g., /etc/passwd, config.json) via crafted attachment requests.
This repository contains a functional exploit for CVE-2025-25279, a path traversal vulnerability in Mattermost 10.4.1's Focalboard plugin. The exploit allows authenticated users to exfiltrate arbitrary files (e.g., /etc/passwd, config.json) by manipulating attachment paths in Focalboard cards.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H