{"id":"EUVD-2025-199831","revision":"843632c9e6ea41c1a0527fb36b194ec1","records":[{"revision":"843632c9e6ea41c1a0527fb36b194ec1","observedAt":"2026-11-02T23:59:38.164+00:00","statement":{"source":"euvd","id":"EUVD-2025-199831","aliases":["CVE-2025-12559","GHSA-4g87-9x45-cx2h"],"title":"Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via th…","description":"Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3,"severity":null}],"references":["https://mattermost.com/security-updates"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-199831","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Nov 27, 2025, 4:36:30 PM","dateUpdated":"Nov 28, 2025, 3:20:44 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-199831","identifiers":["EUVD-2025-199831","CVE-2025-12559","GHSA-4g87-9x45-cx2h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}