tocsin

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-46702: medium 5.4, EPSS 0.22%

Mattermost Incorrect Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250513065225-4ae5d647fb88 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250513065225-4ae5d647fb88
go get github.com/mattermost/mattermost/server/v8@v9.11.16
go get github.com/mattermost/mattermost/server/v8@v10.5.6
go get github.com/mattermost/mattermost/server/v8@v10.6.6
go get github.com/mattermost/mattermost/server/v8@v10.7.3
go get github.com/mattermost/mattermost/server/v8@v10.8.1

Affected

introducedfixedlast affected
08.0.0-20250513065225-4ae5d647fb88-
9.11.09.11.16-
10.5.010.5.6-
10.6.010.6.6-
10.7.010.7.3-
10.8.010.8.1-

Fixed versions

8.0.0-20250513065225-4ae5d647fb889.11.1610.5.610.6.610.7.310.8.1

Sources

CVE-2025-46702 · published · modified · JSON