tocsin

Go/github.com/mattermost/mattermost-server CVE-2025-1792: low 3.1, EPSS 0.25%

Mattermost fails to properly enforce access controls for guest users in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.13+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.11.13+incompatible
go get github.com/mattermost/mattermost-server@v10.5.4+incompatible
go get github.com/mattermost/mattermost-server@v10.7.1+incompatible

Affected

introducedfixedlast affected
9.0.0-rc1+incompatible9.11.13+incompatible-
10.0.0-rc1+incompatible10.5.4+incompatible-
10.6.0-rc1+incompatible10.7.1+incompatible-

Fixed versions

9.11.13+incompatible10.5.4+incompatible10.7.1+incompatible

Sources

CVE-2025-1792 · published · modified · JSON