{"id":"EUVD-2025-205062","enisaUuid":"e956f4d9-0907-3ead-b191-771209425cf4","description":"Mattermost versions 11.1.x \u003c\u003d 11.1.0, 11.0.x \u003c\u003d 11.0.5, 10.12.x \u003c\u003d 10.12.3, 10.11.x \u003c\u003d 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affected posts","datePublished":"Dec 24, 2025, 8:02:55 AM","dateUpdated":"Dec 24, 2025, 4:35:17 PM","baseScore":4.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","references":"https://mattermost.com/security-updates\n","aliases":"CVE-2025-64641\nGHSA-vww6-79rv-3j4x\n","assigner":"Mattermost","epss":0.18,"enisaIdProduct":[{"id":"2c24501b-0f53-33a9-9617-6cab5b813c27","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.7"},{"id":"30d2f1e2-a3be-31fc-b697-2998cf330d1c","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.12.0 ≤10.12.3"},{"id":"70debcae-755a-3084-a9d5-a700670de2f2","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.1.0 ≤11.1.0"},{"id":"9ff3f55c-903a-3d60-bced-c084592ffce5","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.0.0 ≤11.0.5"}],"enisaIdVendor":[{"id":"7474e303-8c68-3788-898b-06c2c0dd61f6","vendor":{"name":"Mattermost"}}],"enisaIdVulnerability":[{"id":"7d8b5f1c-ad19-374f-8b12-d4f3e30cbe17","vulnerability":{"id":"GHSA-vww6-79rv-3j4x","description":"Mattermost doesn\u0027t verify that post actions invoking `/share-issue-publicly` were created by the Jira plugin","datePublished":"Dec 24, 2025, 9:30:22 AM","dateUpdated":"Feb 27, 2026, 10:04:50 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-64641\nhttps://github.com/mattermost/mattermost/pull/34551\nhttps://github.com/mattermost/mattermost/commit/b57c297c6d7ae6812d85e32a625806ac9555deee\nhttps://github.com/mattermost/mattermost\nhttps://mattermost.com/security-updates\nhttps://pkg.go.dev/vuln/GO-2026-4260\n","enisa_id":"EUVD-2025-205062\n","aliases":"GHSA-vww6-79rv-3j4x\nCVE-2025-64641\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"953aa6f3-d0b2-3bf7-b292-6c09cea5de0c","vulnerability":{"id":"CVE-2025-64641","description":"Mattermost versions 11.1.x \u003c\u003d 11.1.0, 11.0.x \u003c\u003d 11.0.5, 10.12.x \u003c\u003d 10.12.3, 10.11.x \u003c\u003d 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the Jira plugin which allowed a malicious Mattermost user to exfiltrate Jira tickets when victim users interacted with affected posts","datePublished":"Dec 24, 2025, 8:02:55 AM","dateUpdated":"Dec 24, 2025, 4:35:17 PM","status":"PUBLISHED","baseScore":4.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","references":"https://mattermost.com/security-updates\n","enisa_id":"EUVD-2025-205062\n","assigner":"Mattermost","epss":0.18,"dataProcessed":"Nov 2, 2026, 7:21:02 AM","vulnerabilityProduct":[{"id":"51cd65e0-2143-3d22-ab7d-d0c133483703","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.7"},{"id":"5a248834-330f-38b5-a40a-b1855119196f","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.0.0 ≤11.0.5"},{"id":"daf2aa08-759e-3357-8de4-ef05dc63e630","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"11.1.0 ≤11.1.0"},{"id":"f9cf75df-8c01-30f4-acb0-c3194574ff14","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.12.0 ≤10.12.3"}],"vulnerabilityVendor":[{"id":"28144304-5cf7-367b-86b1-928caba319af","vendor":{"name":"Mattermost"}}]}}],"enisaIdAdvisory":[{"id":"336b9724-18dc-3e1c-9343-3233b450e57e","advisory":{"id":"WID-SEC-W-2025-2685","description":"Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen","summary":"Ein Angreifer kann eine Schwachstelle in Mattermost ausnutzen, um Informationen offenzulegen.","datePublished":"Nov 26, 2025, 11:00:00 PM","dateUpdated":"Feb 26, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2685.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2025-2685\n","aliases":"CVE-2025-64641\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"40c7877f-0b22-3621-b128-fe26b31e253b","product":{"name":"Server 11.1.1","vendor":{"name":"Mattermost"}}},{"id":"6d9c755d-2def-38d9-8d36-2497e58183be","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}}},{"id":"8c45cf25-0bf6-3158-8897-10aa6b87fda9","product":{"name":"Server 10.11.8","vendor":{"name":"Mattermost"}}},{"id":"ac66ab73-d8ea-32dd-8e53-29546b21b1b8","product":{"name":"Server 11.0.6","vendor":{"name":"Mattermost"}}},{"id":"b400db14-a925-3d9d-b0f9-0789e84ef790","product":{"name":"Server 10.12.4","vendor":{"name":"Mattermost"}}},{"id":"b5b0c3f0-dc70-35cd-a5ea-ac61d47d1dd2","product":{"name":"Server 11.2.0","vendor":{"name":"Mattermost"}}}]}}]}