Go/github.com/mattermost/mattermost-server/v6 CVE-2025-13324: low 3.7, EPSS 0.20%
Mattermost has an Invite Token Replay Vulnerability via Channel Membership Manipulation in github.com/mattermost/mattermost
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-4256#Go/github.com/mattermost/mattermost-server/v6
- nvd: CVE-2025-13324
- https://github.com/advisories/GHSA-x3r8-2hmh-89f5
- https://github.com/mattermost/mattermost/commit/364c2203de00fe0d8424b6b46d6f0eeb02a2539a
- https://github.com/mattermost/mattermost/commit/7ccb62db7958abd6a4b21a06c5a4f5367a8f8b1f
- https://github.com/mattermost/mattermost/commit/9f54e5cdc3aef412945ff0e6a58338f7b549bdda
- https://mattermost.com/security-updates
CVE-2025-13324 · published · modified · JSON