tocsin

CVE-2025-53971

8 advisories.

Go/github.com/mattermost/mattermost-server CVE-2025-53971: low 3.8

Mattermost Fails to Properly Validate Team Role Modification

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.18 or later.

go get github.com/mattermost/mattermost-server@v10.5.9
go get github.com/mattermost/mattermost-server@v9.11.18

Affected

introducedfixedlast affected
10.5.010.5.9-
9.11.09.11.18-

Fixed versions

10.5.99.11.18

Sources

CVE-2025-53971 · published · modified · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-53971: low 3.8

Mattermost Fails to Properly Validate Team Role Modification

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250721095846-c602a4a78e1f or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250721095846-c602a4a78e1f

Affected

introducedfixedlast affected
08.0.0-20250721095846-c602a4a78e1f-

Fixed versions

8.0.0-20250721095846-c602a4a78e1f

Sources

CVE-2025-53971 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2025-53971: low 3.8

Mattermost Fails to Properly Validate Team Role Modification

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-5.39.3

Fixed versions

No fixed version in the source.

Sources

CVE-2025-53971 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2025-53971: low 3.8

Mattermost Fails to Properly Validate Team Role Modification

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-6.7.2

Fixed versions

No fixed version in the source.

Sources

CVE-2025-53971 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2025-53971: unknown

Mattermost Fails to Properly Validate Team Role Modification in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.11.18+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.11.18+incompatible
go get github.com/mattermost/mattermost-server@v10.5.9+incompatible

Affected

introducedfixedlast affected
9.11.0+incompatible9.11.18+incompatible-
10.5.0+incompatible10.5.9+incompatible-

Fixed versions

9.11.18+incompatible10.5.9+incompatible

Sources

CVE-2025-53971 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2025-53971: unknown

Mattermost Fails to Properly Validate Team Role Modification in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-53971 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2025-53971: unknown

Mattermost Fails to Properly Validate Team Role Modification in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-53971 · published · modified · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2025-53971: unknown

Mattermost Fails to Properly Validate Team Role Modification in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20250721095846-c602a4a78e1f or later.

go get github.com/mattermost/mattermost/server/v8@v8.0.0-20250721095846-c602a4a78e1f

Affected

introducedfixedlast affected
08.0.0-20250721095846-c602a4a78e1f-

Fixed versions

8.0.0-20250721095846-c602a4a78e1f

Sources

CVE-2025-53971 · published · modified · JSON