PT-2025-45874 · Go · Github.Com/Mattermost/Mattermost-Server

Published 2025-10-30 · Updated 2025-10-30

OSV

Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization in github.com/mattermost/mattermost-server

Related Identifiers

GO-2025-4075

Affected Products

Github.Com/Mattermost/Mattermost-Server

References · 6

• https://osv.dev/vulnerability/GO-2025-4075 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18872 · Security Note
• https://github.com/mattermost/mattermost/commit/8f6bb1570dd234c63de5241eff9fbb268aad358c · Note
• https://github.com/advisories/GHSA-hgrp-fgm8-56g8 · Note
• http://github.com/mattermost/mattermost/commit/753386c2b2b06233d8bd977e3db29a4fe18098cb · Note
• https://mattermost.com/security-updates · Note