Weak cache keys lead to post IDOR and link preview poisoning

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-9078 · Microsoft / collected KEV context

EUVD-2025-29164

GHSA-9p92-x77w-9fw2

GO-2025-3959

cve-program · CVE-2025-9078

• https://mattermost.com/security-updates

euvd · EUVD-2025-29164

• https://mattermost.com/security-updates

nvd · CVE-2025-9078

• https://mattermost.com/security-updates

osv · GHSA-9p92-x77w-9fw2

• https://nvd.nist.gov/vuln/detail/CVE-2025-9078
• https://github.com/mattermost/mattermost/commit/356880c8430b77a4a390c89d5a33f6928188d137
• https://github.com/mattermost/mattermost/commit/944ad5cdd9876ef61c78c8275906262a4118755a
• https://github.com/mattermost/mattermost/commit/a8a4badc130be101e5bc4b7916bbcd2f966c4b79
• https://github.com/mattermost/mattermost/commit/cd87e5c877373f109742aa90a3fa136c14774325
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

osv · GO-2025-3959

• https://github.com/advisories/GHSA-9p92-x77w-9fw2
• https://nvd.nist.gov/vuln/detail/CVE-2025-9078
• https://github.com/mattermost/mattermost/commit/356880c8430b77a4a390c89d5a33f6928188d137
• https://github.com/mattermost/mattermost/commit/944ad5cdd9876ef61c78c8275906262a4118755a
• https://github.com/mattermost/mattermost/commit/a8a4badc130be101e5bc4b7916bbcd2f966c4b79
• https://github.com/mattermost/mattermost/commit/cd87e5c877373f109742aa90a3fa136c14774325
• https://mattermost.com/security-updates

No related operational record is retained in the current change model.