Go/github.com/mattermost/mattermost-server CVE-2025-4573: medium 4.1, EPSS 0.28%

Mattermost allows authenticated administrator to execute LDAP search filter injection

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.14 or later.

go get github.com/mattermost/mattermost-server@v10.7.2

go get github.com/mattermost/mattermost-server@v10.6.4

go get github.com/mattermost/mattermost-server@v10.5.5

go get github.com/mattermost/mattermost-server@v9.11.14

Affected

Fixed versions

Sources

• osv: GHSA-4r67-4x4p-fprg#Go/github.com/mattermost/mattermost-server
• https://nvd.nist.gov/vuln/detail/CVE-2025-4573
• https://github.com/mattermost/mattermost/commit/1f9c688a30847eeb7bfb1574dc7bbb9f011afbf7
• https://github.com/mattermost/mattermost/commit/64a65c6107877382040297b3ef215c689caaed74
• https://github.com/mattermost/mattermost/commit/77892234944bc7476b20794e516538bcac717de9
• https://github.com/mattermost/mattermost/commit/b33926709b956a59558cc7fef80c0e75a769ce81
• https://github.com/mattermost/mattermost/commit/b47e89c4f98cb6ad9f1dceb79325aa94e80f963a
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

CVE-2025-4573 · published 2025-06-11T12:30:36Z · modified 2025-06-11T18:27:21.419861Z · JSON