Mattermost Server vulnerabilities
482 known vulnerabilities affecting mattermost/mattermost_server.
Total CVEs
482
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL17HIGH82MEDIUM341LOW42
Vulnerabilities
Page 25 of 25
CVE-2025-27715P4LOWCVSS 2.7≥ 9.11.0, < 9.11.92025-03-21
CVE-2025-27715 [LOW] CWE-863 CVE-2025-27715: Mattermost versions 9.11.x <= 9.11.8 fail to prompt for explicit approval before adding a team admin
Mattermost versions 9.11.x <= 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them.
nvd
CVE-2023-3587P4LOWCVSS 2.7≥ 7.8.0, < 7.8.7≥ 7.10.0, < 7.10.32023-07-17
CVE-2023-3587 [LOW] CWE-862 CVE-2023-3587: Mattermost fails to properly show information in the UI, allowing a system admin to modify a board s
Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.
nvd
← Previous25 / 25