tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-55073: medium 5.4, EPSS 0.20%

Mattermost allows an attacker to edit arbitrary posts via a crafted MSTeams plugin OAuth redirect URL

Action: Upgrade github.com/mattermost/mattermost-server to 10.5.12 or later.

go get github.com/mattermost/mattermost-server@v10.11.4
go get github.com/mattermost/mattermost-server@v10.5.12
go get github.com/mattermost/mattermost-server@v10.12.1

Affected

introducedfixedlast affected
10.11.010.11.4-
10.5.010.5.12-
10.12.010.12.1-

Fixed versions

10.11.410.5.1210.12.1

Sources

CVE-2025-55073 · published · modified · JSON