tocsin

Go/github.com/mattermost/mattermost CVE-2025-13324: medium 4.3, EPSS 0.20%

Mattermost has an Invite Token Replay Vulnerability via Channel Membership Manipulation

Action: Upgrade github.com/mattermost/mattermost to 10.11.5 or later.

go get github.com/mattermost/mattermost@v10.12.2
go get github.com/mattermost/mattermost@v10.11.5
go get github.com/mattermost/mattermost@v11.0.4

Affected

introducedfixedlast affected
10.12.010.12.2-
10.11.0-rc110.11.5-
11.0.0-alpha.111.0.4-

Fixed versions

10.12.210.11.511.0.4

Sources

CVE-2025-13324 · published · modified · JSON