← Database

CVE-2025-27933

MEDIUM CVSS: 5.4 Published: 2025-03-21 Modified: 2026-06-17

Description

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to fail to enforce channel conversion restrictions, which allows members with permission to convert public channels to private ones to also convert private ones to public

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-863, CWE-863

References