CVE-2025-13767CWE-863broken-access-control

CVE-2025-13767

Medium · published December 24, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-12-24T13:15Z
Affected products (4)
ProductVersionsFixed in
mattermost/mattermost_server≥ 10.11.0, < 10.11.810.11.8
mattermost/mattermost_server≥ 10.12.0, < 10.12.410.12.4
mattermost/mattermost_server≥ 11.0.0, < 11.0.611.0.6
mattermost/mattermost_server≥ 11.1.0, < 11.1.111.1.1
References (1)
https://mattermost.com/security-updates · [email protected]
EPSS history
Timeline
  • 24 DEC 08:01Z
    Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin
    cvelistv5