{"id":"EUVD-2025-200087","enisaUuid":"b6d3cec1-59b4-30a3-b9e7-93bd71b72319","description":"Mattermost versions 11.0.x \u003c\u003d 11.0.2, 10.12.x \u003c\u003d 10.12.1, 10.11.x \u003c\u003d 10.11.4, 10.5.x \u003c\u003d 10.5.12 fail to validate user permissions when deleting comments in Boards, which allows an authenticated user with the editor role to delete comments created by other users.","datePublished":"Dec 1, 2025, 7:51:46 PM","dateUpdated":"Dec 1, 2025, 8:02:24 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://mattermost.com/security-updates\n","aliases":"CVE-2025-12756\nGHSA-p6gj-jc38-x2m7\n","assigner":"Mattermost","epss":0.2,"enisaIdProduct":[{"id":"811f3c5a-29c8-39e4-a54e-cf5a6c6d5a3a","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.5.0 ≤10.5.12"},{"id":"991d98c9-35d0-305e-b713-eb8135518003","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.12.0 ≤10.12.1"},{"id":"cf94836a-f4b4-3688-934d-82244612c4ae","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.0.0 ≤11.0.2"},{"id":"eb333b22-c342-3937-82f1-74a4ba24066f","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.4"}],"enisaIdVendor":[{"id":"e312c10b-fa55-35ac-8be3-78c55652ce8d","vendor":{"name":"Mattermost"}}],"enisaIdVulnerability":[{"id":"a27ed1fa-7049-3a0f-b308-56ef49b746b7","vulnerability":{"id":"GHSA-p6gj-jc38-x2m7","description":"Mattermost fails to validate user permissions when deleting comments in Boards","datePublished":"Dec 1, 2025, 9:30:26 PM","dateUpdated":"Dec 2, 2025, 4:53:35 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-12756\nhttps://github.com/mattermost/mattermost\nhttps://mattermost.com/security-updates\n","enisa_id":"EUVD-2025-200087\n","aliases":"GHSA-p6gj-jc38-x2m7\nCVE-2025-12756\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:19 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f2d5ab40-f9ac-3d34-a275-b90728141f13","vulnerability":{"id":"CVE-2025-12756","description":"Mattermost versions 11.0.x \u003c\u003d 11.0.2, 10.12.x \u003c\u003d 10.12.1, 10.11.x \u003c\u003d 10.11.4, 10.5.x \u003c\u003d 10.5.12 fail to validate user permissions when deleting comments in Boards, which allows an authenticated user with the editor role to delete comments created by other users.","datePublished":"Dec 1, 2025, 7:51:46 PM","dateUpdated":"Dec 1, 2025, 8:02:24 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://mattermost.com/security-updates\n","enisa_id":"EUVD-2025-200087\n","assigner":"Mattermost","epss":0.2,"dataProcessed":"Nov 6, 2026, 7:18:07 AM","vulnerabilityProduct":[{"id":"256f263e-26cc-38d4-bbf8-6e139402e792","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.12.0 ≤10.12.1"},{"id":"40b48b1c-7ed7-3f93-9d1f-7f7ac4466f59","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.0.0 ≤11.0.2"},{"id":"743d8459-3fa6-38bb-a315-7680436bc0b7","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.4"},{"id":"e50f7d80-4b91-3ccd-96cd-2803f7e45030","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.5.0 ≤10.5.12"}],"vulnerabilityVendor":[{"id":"ffc3dc08-ffae-3bb4-a2a9-d51e84a1de78","vendor":{"name":"Mattermost"}}]}}],"enisaIdAdvisory":[]}