Description
(CVE-2025-2475) Mattermost账户转机器人缓存未失效身份验证绕过漏洞
(CVE-2025-2475) Mattermost账户转机器人缓存未失效身份验证绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/advisories/GHSA-6rqh-8465-2xcw
https://nvd.nist.gov/vuln/detail/CVE-2025-2475
https://advisories.gitlab.com/golang/github.com/mattermost/mattermost/server/v8/CVE-2025-2475/
https://dbugs.ptsecurity.com/vulnerability/PT-2025-16246
https://www.suse.com/security/cve/CVE-2025-2475.html
https://cert.kenet.or.ke/cve-2025-2475-mattermost-bot-conversion-cache-invalidation-vulnerability
https://cve.imfht.com/detail/CVE-2025-2475?lang=en
https://synscan.net/vuln/cve-2025-2475
https://hossted.com/knowledge-base/newsflash/communication-and-collaboration/communication/mattermost-improper-cache-invalidation-enables-one-time-unauthorized-bot-login/
https://avd.aquasec.com/nvd/2025/cve-2025-2475/