Volerion logoVolerion
Volerion logoVolerion

Mattermost Bookmark Management Vulnerability in Archived Channels

Vulnerability

A vulnerability exists in Mattermost versions 10.4.x through 10.4.2, 10.3.x through 10.3.3, and 9.11.x through 9.11.8, allowing authenticated users to create or update bookmarks in archived channels. The issue arises because these versions do not properly restrict bookmark actions in channels that have been archived.

Impact

Exploitation of this vulnerability could lead to unauthorized bookmark creation or modification in archived channels, potentially allowing users to manipulate channel references or highlight important messages inappropriately.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
0.6
exploitability
5.2
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.