CVE-2025-8023

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.5.x through 10.5.8 Mattermost versions 9.11.x through 9.11.17 Mattermost versions 10.8.x through 10.8.3 Mattermost versions 10.9.x through 10.9.2

Description: Mattermost fails to sanitize path traversal sequences in template file destination paths. This allows a system administrator to perform path traversal attacks via malicious path components, potentially enabling malicious file placement outside intended directories.

Recommendations: Update Mattermost to a version later than 10.5.8. Update Mattermost to a version later than 9.11.17. Update Mattermost to a version later than 10.8.3. Update Mattermost to a version later than 10.9.2.