~ / search / GHSA-7rgp-4j56-fm79

GHSA-7rgp-4j56-fm79

Mattermost has Improper Check for Unusual or Exceptional Conditions

Source: GitHub Advisory Database (reviewed) Low CVE-2025-22445

Packages

EcosystemPackageAffectedFixed in
Go github.com/mattermost/mattermost/server/v8 >= 10.0, < 10.3.0 10.3.0
Go github.com/mattermost/mattermost/server/v8 < 8.0.0-20250102081831-64c566a8280b 8.0.0-20250102081831-64c566a8280b

Details

As written in the advisory (Markdown source, shown as plain text).

Mattermost versions 10.x <= 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting.

References

External links from the advisory. They lead to third-party sites.