更新: 331 个文件 - 2026-04-01 05:00:10

07-framework-security/platforms/mattermost/INDEX.md

@@ -5,14 +5,14 @@
 - 系统 ID: `mattermost`
 - 分类: `platforms`
 - 覆盖策略: `rolling-24m`
-- 总案例数: `35`
-- 近 30 天新增/更新: `23`
-- 重点 Markdown 案例数: `35`
+- 总案例数: `36`
+- 近 30 天新增/更新: `24`
+- 重点 Markdown 案例数: `36`
 - 已实证(真实版本): `0`
 - 已实证(synthetic): `0`
 - 阻塞数: `0`
-- 待人工/缺浏览器证据: `35`
-- 最近渲染时间: `2026-03-31T09:18:20+00:00`
+- 待人工/缺浏览器证据: `36`
+- 最近渲染时间: `2026-04-01T09:21:04+00:00`
 
 ## 目标约束
 
@@ -34,6 +34,7 @@
 | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
 |------|--------|----------|----------|----------|------------|----------|--------|
 | Issue Identifier | `severity` | `generated` | `triage-manual` | `synthetic` | `official` | `Fix Release Date` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-issue-identifier.md) |
+| Mattermost doesn't set permissions on downloaded bulk export | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-31T23:19:38.844657Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-3113.md) |
 | Mattermost allows attackers to take over arbitrary user accounts via overly permissive substring matching flaw | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-31T05:32:49.079377Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-27656.md) |
 | Mattermost doesn't rate limit login requests, allowing DoS | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-31T05:31:41.869147Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-26233.md) |
 | Mattermost fails to validate user's authentication method when processing account auth type switch | `low` | `generated` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2026-03-23T18:56:23.696710Z` | [link](/Users/x/websafe/07-framework-security/platforms/mattermost/cases/mattermost-cve-2026-22545.md) |