{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-4981",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-4981",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-06-20T10:27:13.471Z",
    "updatedAt": "2025-06-20T13:10:32.981Z",
    "importedAt": "2026-10-24T01:57:39.058Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Path Traversal Leading to RCE by Any Authenticated Mattermost User",
      "summary": "Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to sanitize filenames in the archive extractor which allows authenticated users to write files to arbitrary locations on the filesystem via uploading archives with path traversal sequences in filenames, potentially leading to remote code execution. The vulnerability impacts instances where file uploads and document search by content is enabled (FileSettings.EnableFileAttachments = true and FileSettings.ExtractContent = true). These configuration settings are enabled by default.",
      "affected": [
        {
          "vendor": "Mattermost",
          "product": "Mattermost",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "10.5.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "10.5.5"
            },
            {
              "version": "9.11.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "9.11.15"
            },
            {
              "version": "10.8.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "10.8.0"
            },
            {
              "version": "10.7.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "10.7.2"
            },
            {
              "version": "10.6.0",
              "status": "affected",
              "versionType": "semver",
              "lessThanOrEqual": "10.6.5"
            },
            {
              "version": "10.9.0",
              "status": "unaffected"
            },
            {
              "version": "10.5.6",
              "status": "unaffected"
            },
            {
              "version": "9.11.16",
              "status": "unaffected"
            },
            {
              "version": "10.8.1",
              "status": "unaffected"
            },
            {
              "version": "10.7.3",
              "status": "unaffected"
            },
            {
              "version": "10.6.6",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  }
}