tocsin

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-2424: low 3.1, EPSS 0.26%

Mattermost Incorrect Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250213231113-68c11e9ecb71 or later.

go get github.com/mattermost/mattermost/server/v8@v10.5.2
go get github.com/mattermost/mattermost/server/v8@v9.11.10
go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250213231113-68c11e9ecb71

Affected

introducedfixedlast affected
10.5.010.5.2-
9.11.09.11.10-
08.0.0-20250213231113-68c11e9ecb71-

Fixed versions

10.5.29.11.108.0.0-20250213231113-68c11e9ecb71

Sources

CVE-2025-2424 · published · modified · JSON