CVE-2025-13321

Katalog CVE

CVSS 3.3 · Low EPSS 0,12%

Kerentanan Insertion of Sensitive Information into Log File pada mattermost desktop. Skor CVSS 3.1 3.3 (Low) menurut mattermost.com.

Deskripsi (NVD)

Mattermost Desktop App versions <6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs.

Rincian

Terbit di NVD

17 Desember 2025

Terakhir diubah

13 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber mattermost.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

0,12% peluang dieksploitasi; lebih tinggi dari 1,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mattermost.com/security-updates advisory vendor