tocsin

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-27538: low 2.2, EPSS 0.24%

Mattermost Missing Authentication for Critical Function

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250314142426-c049748b8863 or later.

go get github.com/mattermost/mattermost/server/v8@v10.5.2
go get github.com/mattermost/mattermost/server/v8@v9.11.10
go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250314142426-c049748b8863

Affected

introducedfixedlast affected
10.5.010.5.2-
9.11.09.11.10-
08.0.0-20250314142426-c049748b8863-

Fixed versions

10.5.29.11.108.0.0-20250314142426-c049748b8863

Sources

CVE-2025-27538 · published · modified · JSON