{"id":"EUVD-2025-30247","revision":"45b985fed6c54071ae9d587af4297a56","records":[{"revision":"45b985fed6c54071ae9d587af4297a56","observedAt":"2026-11-07T03:35:57.429+00:00","statement":{"source":"euvd","id":"EUVD-2025-30247","aliases":["CVE-2025-9081","GHSA-f72g-52v7-mg3p"],"title":"Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration","description":"Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","score":3.1,"severity":null}],"references":["https://mattermost.com/security-updates"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-30247","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Sep 19, 2025, 7:36:14 PM","dateUpdated":"Sep 19, 2025, 7:52:03 PM"},"relatedAdvisories":[{"id":"openSUSE-SU-2025:15576-1","title":"govulncheck-vulndb-0.0.20250924T192141-1.1 on GA media","vulnerabilityIds":["CVE-2025-10630","CVE-2025-59341","CVE-2025-59342","CVE-2025-59345","CVE-2025-59346","CVE-2025-59347","CVE-2025-59348","CVE-2025-59349","CVE-2025-59350","CVE-2025-59351","CVE-2025-59352","CVE-2025-59353","CVE-2025-59354","CVE-2025-59410","CVE-2025-9079","CVE-2025-9081"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-30247","identifiers":["EUVD-2025-30247","CVE-2025-9081","GHSA-f72g-52v7-mg3p"]},"retained":false,"historicalAffected":[]}],"coverage":[]}