tocsin

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-3228: medium 4.3, EPSS 0.29%

Mattermost allows an unauthorized Guest user access to Playbook

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250520060012-d0380305ef7a or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250520060012-d0380305ef7a
go get github.com/mattermost/mattermost/server/v8@v10.5.6
go get github.com/mattermost/mattermost/server/v8@v9.11.16
go get github.com/mattermost/mattermost/server/v8@v10.8.1
go get github.com/mattermost/mattermost/server/v8@v10.7.3
go get github.com/mattermost/mattermost/server/v8@v10.6.6

Affected

introducedfixedlast affected
08.0.0-20250520060012-d0380305ef7a-
10.5.010.5.6-
9.11.09.11.16-
10.8.010.8.1-
10.7.010.7.3-
10.6.010.6.6-

Fixed versions

8.0.0-20250520060012-d0380305ef7a10.5.69.11.1610.8.110.7.310.6.6

Sources

CVE-2025-3228 · published · modified · JSON