A vulnerability was found in Mattermost up to 9.11.7/10.2.2/10.3.2/10.4.1. It has been rated as critical. This issue affects some unknown processing of the component Boards Category Handler. The manipulation leads to sql injection.
The identification of this vulnerability is CVE-2025-24490. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
