tocsin

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-1412: low 3.1, EPSS 0.26%

Mattermost fails to invalidate all active sessions when converting a user to a bot

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20241217145510-faa7e4f2ea0c or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20241217145510-faa7e4f2ea0c
go get github.com/mattermost/mattermost/server/v8@v10.4.2
go get github.com/mattermost/mattermost/server/v8@v9.11.7

Affected

introducedfixedlast affected
08.0.0-20241217145510-faa7e4f2ea0c-
10.4.0-rc110.4.2-
9.11.0-rc19.11.7-

Fixed versions

8.0.0-20241217145510-faa7e4f2ea0c10.4.29.11.7

Sources

CVE-2025-1412 · published · modified · JSON