tocsin

CVE-2025-1472

6 advisories.

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-1472: medium 4.3, EPSS 0.25%

Mattermost Fails to Properly Perform Viewer Role Authorization

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 9.11.9 or later.

go get github.com/mattermost/mattermost/server/v8@v9.11.9

Affected

introducedfixedlast affected
9.11.09.11.9-

Fixed versions

9.11.9

Sources

CVE-2025-1472 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2025-1472: medium 4.3, EPSS 0.25%

Mattermost Fails to Properly Perform Viewer Role Authorization

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.9 or later.

go get github.com/mattermost/mattermost-server@v9.11.9

Affected

introducedfixedlast affected
9.11.09.11.9-

Fixed versions

9.11.9

Sources

CVE-2025-1472 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2025-1472: medium 4.3, EPSS 0.25%

Mattermost Fails to Properly Perform Viewer Role Authorization in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.9+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.11.9+incompatible

Affected

introducedfixedlast affected
9.11.0+incompatible9.11.9+incompatible-

Fixed versions

9.11.9+incompatible

Sources

CVE-2025-1472 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2025-1472: medium 4.3, EPSS 0.25%

Mattermost Fails to Properly Perform Viewer Role Authorization in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-1472 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2025-1472: medium 4.3, EPSS 0.25%

Mattermost Fails to Properly Perform Viewer Role Authorization in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-1472 · published · modified · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-1472: medium 4.3, EPSS 0.25%

Mattermost Fails to Properly Perform Viewer Role Authorization in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-1472 · published · modified · JSON