Ms Teams

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-27936 Apr 16, 10:15 Go MEDIUM PATCH This Month

Mattermost Plugin MSTeams versions <2.1.0 and Mattermost Server versions 10.5.x <=10.5.1 with the MS Teams plugin enabled fail to perform constant time comparison on a MSTeams plugin webhook secret. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Mattermost Mattermost Server Suse Ms Teams

NVD

CVSS 3.1

5.3

EPSS

0.2%

CVE-2025-27936 Go

EPSS 0% CVSS 5.3

MEDIUM PATCH This Month

Mattermost Plugin MSTeams versions <2.1.0 and Mattermost Server versions 10.5.x <=10.5.1 with the MS Teams plugin enabled fail to perform constant time comparison on a MSTeams plugin webhook secret. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Mattermost Mattermost Server +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy