SQL Injection Affecting github.com/mattermost/mattermost-plugin-boards/server/model package, versions <9.0.5
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-GOLANG-GITHUBCOMMATTERMOSTMATTERMOSTPLUGINBOARDSSERVERMODEL-8745213
- published24 Feb 2025
- disclosed24 Feb 2025
- creditvisat
Introduced: 24 Feb 2025
NewCVE-2025-24490 Â (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade github.com/mattermost/mattermost-plugin-boards/server/model to version 9.0.5 or higher.
Overview
Affected versions of this package are vulnerable to SQL Injection due to improper input sanitization when reordering board categories. An attacker can craft a specially designed request that manipulates SQL queries, allowing unauthorized retrieval of data from the database.