{"id":"EUVD-2025-29171","enisaUuid":"e09f381e-7010-3888-9a75-4a8f2ad4db10","description":"Mattermost versions 10.10.x \u003c\u003d 10.10.1, 10.5.x \u003c\u003d 10.5.9, 10.9.x \u003c\u003d 10.9.4 fail to validate the redirect_to parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL.","datePublished":"Sep 15, 2025, 10:28:17 AM","dateUpdated":"Sep 15, 2025, 12:06:57 PM","baseScore":7.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","references":"https://mattermost.com/security-updates\n","aliases":"CVE-2025-9072\nGHSA-69j8-prx2-vx98\n","assigner":"Mattermost","epss":0.18,"enisaIdProduct":[{"id":"4d75d410-7dd6-30b4-b9af-de563d544fb3","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.10.0 ≤10.10.1"},{"id":"867ee4c8-28aa-3617-a0ef-bc65280ab753","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.9.0 ≤10.9.4"},{"id":"bcc22d30-427d-3c9e-801c-2f7cc12b4323","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":""},{"id":"f0b53400-8fd2-3969-be99-a381745a32a5","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.5.0 ≤10.5.9"}],"enisaIdVendor":[{"id":"bcc22d30-427d-3c9e-801c-2f7cc12b4323","vendor":{"name":"Mattermost"}}],"enisaIdVulnerability":[{"id":"3cb27a47-1019-32c6-b30e-367c5a3aaafc","vulnerability":{"id":"CVE-2025-9072","description":"Mattermost versions 10.10.x \u003c\u003d 10.10.1, 10.5.x \u003c\u003d 10.5.9, 10.9.x \u003c\u003d 10.9.4 fail to validate the redirect_to parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL.","datePublished":"Sep 15, 2025, 10:28:17 AM","dateUpdated":"Sep 15, 2025, 12:06:57 PM","status":"PUBLISHED","baseScore":7.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","references":"https://mattermost.com/security-updates\n","enisa_id":"EUVD-2025-29171\n","assigner":"Mattermost","epss":0.18,"dataProcessed":"Oct 29, 2026, 7:15:26 AM","vulnerabilityProduct":[{"id":"594ef662-4bbb-3894-b546-514d5421e375","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.10.0 ≤10.10.1"},{"id":"99111f61-a3c4-342a-ad00-c233abcff88d","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":""},{"id":"acd37b19-070e-47b3-a3c6-bf5480b23c05","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.9.0 ≤10.9.4"},{"id":"c9d919b2-cf37-4088-a286-30a320bdccef","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.10.0 ≤10.10.1"},{"id":"cac2b52e-73d7-42bb-9552-f2956d518e98","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.5.0 ≤10.5.9"},{"id":"f7136833-2009-3cd4-ba45-f6fdc5fc5d55","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.9.0 ≤10.9.4"},{"id":"fd71e0a2-24a4-3747-81f6-40442c6eaa84","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.5.0 ≤10.5.9"}],"vulnerabilityVendor":[{"id":"99111f61-a3c4-342a-ad00-c233abcff88d","vendor":{"name":"Mattermost"}}]}},{"id":"da959efb-9d06-3465-bb74-8b47a7dbdb8c","vulnerability":{"id":"GHSA-69j8-prx2-vx98","description":"Mattermost Open Redirect vulnerability","datePublished":"Sep 15, 2025, 12:31:25 PM","dateUpdated":"Sep 16, 2025, 7:54:54 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-9072\nhttps://github.com/mattermost/mattermost/commit/13cd76009d31754db46115bddef5287a8a29871a\nhttps://github.com/mattermost/mattermost/commit/9eebaadf8f720788e99b6997337c8df330271326\nhttps://github.com/mattermost/mattermost/commit/fda403fb6ec41bea8780bff198a26860f105e6e5\nhttps://github.com/mattermost/mattermost\nhttps://mattermost.com/security-updates\n","enisa_id":"EUVD-2025-29171\n","aliases":"GHSA-69j8-prx2-vx98\nCVE-2025-9072\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:12:52 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"6d8e27a3-a7d0-3b67-ba43-99a4e3d0289a","advisory":{"id":"openSUSE-SU-2025:15564-1","description":"govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media","datePublished":"Sep 18, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:42:03 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15564-1.json\nhttps://www.suse.com/security/cve/CVE-2025-4953/\nhttps://www.suse.com/security/cve/CVE-2025-54123/\nhttps://www.suse.com/security/cve/CVE-2025-54376/\nhttps://www.suse.com/security/cve/CVE-2025-58058/\nhttps://www.suse.com/security/cve/CVE-2025-58063/\nhttps://www.suse.com/security/cve/CVE-2025-58157/\nhttps://www.suse.com/security/cve/CVE-2025-58158/\nhttps://www.suse.com/security/cve/CVE-2025-58430/\nhttps://www.suse.com/security/cve/CVE-2025-58437/\nhttps://www.suse.com/security/cve/CVE-2025-58445/\nhttps://www.suse.com/security/cve/CVE-2025-58450/\nhttps://www.suse.com/security/cve/CVE-2025-59358/\nhttps://www.suse.com/security/cve/CVE-2025-59359/\nhttps://www.suse.com/security/cve/CVE-2025-59360/\nhttps://www.suse.com/security/cve/CVE-2025-59361/\nhttps://www.suse.com/security/cve/CVE-2025-7445/\nhttps://www.suse.com/security/cve/CVE-2025-8396/\nhttps://www.suse.com/security/cve/CVE-2025-9072/\nhttps://www.suse.com/security/cve/CVE-2025-9076/\nhttps://www.suse.com/security/cve/CVE-2025-9078/\nhttps://www.suse.com/security/cve/CVE-2025-9084/\n","aliases":"CVE-2025-4953\nCVE-2025-54123\nCVE-2025-54376\nCVE-2025-58058\nCVE-2025-58063\nCVE-2025-58157\nCVE-2025-58158\nCVE-2025-58430\nCVE-2025-58437\nCVE-2025-58445\nCVE-2025-58450\nCVE-2025-59358\nCVE-2025-59359\nCVE-2025-59360\nCVE-2025-59361\nCVE-2025-7445\nCVE-2025-8396\nCVE-2025-9072\nCVE-2025-9076\nCVE-2025-9078\nCVE-2025-9084\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1cc76f98-371a-3fc6-aee6-5eadf51878a2","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"29107cb4-f129-3481-ac9b-db60712e7317","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"29cdf64b-9d51-3131-8329-d2fe15008bbb","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"2e830e5b-5857-3f97-a80c-b3a30b97b6c2","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"610e85a2-a76d-3b52-ae27-3bf4aba41ec0","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"736c93eb-17d0-3c0d-9744-877b4b8ffc8d","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"ea17cf9d-e8f0-3a74-b23c-845080a781c5","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fb90779c-62f0-353d-b846-d907b8a69a19","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ff6a651c-8c7a-3ba4-be7f-c1564c968489","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.s390x","vendor":{"name":"SUSE"}}}]}}]}