tocsin

CVE-2025-46702

6 advisories.

Go/github.com/mattermost/mattermost-server CVE-2025-46702: medium 5.4, EPSS 0.22%

Mattermost Incorrect Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost-server to 0.0.0-20250513065225-4ae5d647fb88 or later.

go get github.com/mattermost/mattermost-server@v0.0.0-20250513065225-4ae5d647fb88

Affected

introducedfixedlast affected
0--

Fixed versions

0.0.0-20250513065225-4ae5d647fb88

Sources

CVE-2025-46702 · published · modified · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-46702: medium 5.4, EPSS 0.22%

Mattermost Incorrect Authorization vulnerability

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250513065225-4ae5d647fb88 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250513065225-4ae5d647fb88
go get github.com/mattermost/mattermost/server/v8@v9.11.16
go get github.com/mattermost/mattermost/server/v8@v10.5.6
go get github.com/mattermost/mattermost/server/v8@v10.6.6
go get github.com/mattermost/mattermost/server/v8@v10.7.3
go get github.com/mattermost/mattermost/server/v8@v10.8.1

Affected

introducedfixedlast affected
08.0.0-20250513065225-4ae5d647fb88-
9.11.09.11.16-
10.5.010.5.6-
10.6.010.6.6-
10.7.010.7.3-
10.8.010.8.1-

Fixed versions

8.0.0-20250513065225-4ae5d647fb889.11.1610.5.610.6.610.7.310.8.1

Sources

CVE-2025-46702 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2025-46702: unknown, EPSS 0.22%

Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 0.0.0-20250513065225-4ae5d647fb88 or later.

go get github.com/mattermost/mattermost-server@v0.0.0-20250513065225-4ae5d647fb88
go get github.com/mattermost/mattermost-server@v9.11.16+incompatible
go get github.com/mattermost/mattermost-server@v10.5.6+incompatible
go get github.com/mattermost/mattermost-server@v10.6.6+incompatible
go get github.com/mattermost/mattermost-server@v10.7.3+incompatible
go get github.com/mattermost/mattermost-server@v10.8.1+incompatible

Affected

introducedfixedlast affected
09.11.16+incompatible-
10.5.0+incompatible10.5.6+incompatible-
10.6.0+incompatible10.6.6+incompatible-
10.7.0+incompatible10.7.3+incompatible-
10.8.0+incompatible10.8.1+incompatible-

Fixed versions

0.0.0-20250513065225-4ae5d647fb889.11.16+incompatible10.5.6+incompatible10.6.6+incompatible10.7.3+incompatible10.8.1+incompatible

Sources

CVE-2025-46702 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2025-46702: unknown, EPSS 0.22%

Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-46702 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2025-46702: unknown, EPSS 0.22%

Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-46702 · published · modified · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-46702: unknown, EPSS 0.22%

Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250513065225-4ae5d647fb88 or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250513065225-4ae5d647fb88

Affected

introducedfixedlast affected
08.0.0-20250513065225-4ae5d647fb88-

Fixed versions

8.0.0-20250513065225-4ae5d647fb88

Sources

CVE-2025-46702 · published · modified · JSON