PT-2025-45845 · Go · Github.Com/Mattermost/Mattermost-Server

Published 2025-10-30 · Updated 2025-10-30

OSV

Mattermost Server vulnerable to Cross-site Scripting through file preview feature in github.com/mattermost/mattermost-server

Related Identifiers

GO-2025-4045

Affected Products

Github.Com/Mattermost/Mattermost-Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-11063 · Security Note
• https://osv.dev/vulnerability/GO-2025-4045 · Vendor Advisory
• https://github.com/mattermost/mattermost · Note
• https://github.com/mattermost/mattermost/commit/48533aa483879a19fdd2c1e09c596aa6c028d439 · Note
• https://github.com/advisories/GHSA-cffj-7w5c-jqjh · Note
• https://mattermost.com/security-updates · Note