{"id":"GO-2025-4122","revision":"307da4f07b6d4fc7b9288d0b3ac490ec","records":[{"revision":"307da4f07b6d4fc7b9288d0b3ac490ec","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4122","aliases":["CVE-2025-11777","GHSA-mqcj-8c2g-h97q"],"title":"Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost","description":"Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost","state":0,"publishedAt":"2025-11-17T19:11:25+00:00","modifiedAt":"2026-03-03T04:57:37.13686+00:00","affected":[{"ecosystem":"Go","name":"github.com/mattermost/mattermost","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/mattermost/mattermost/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/mattermost/mattermost-server","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"10.5.0+incompatible"},{"kind":"fixed","version":"10.5.12+incompatible"},{"kind":"introduced","version":"10.11.0+incompatible"},{"kind":"fixed","version":"10.11.4+incompatible"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/mattermost/mattermost-server/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/mattermost/mattermost-server/v6","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/mattermost/mattermost/server/v8","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"8.0.0-20251212204551-54f2e9b4afd5"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-mqcj-8c2g-h97q","https://github.com/mattermost/mattermost/commit/98acefe911dd9de7edf47a7d825dd99f53141a52","https://github.com/mattermost/mattermost/commit/ba86dfc5876b354b9d3c20ff45c08ca6f8426149","https://github.com/mattermost/mattermost/commit/d72d437f1567ba0b639b6e4fd73bab06c51baab5","https://mattermost.com/security-updates"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4122","license":"OSV · upstream source license applies","key":"osv:GO-2025-4122","identifiers":["GO-2025-4122","CVE-2025-11777","GHSA-mqcj-8c2g-h97q"]},"retained":false,"historicalAffected":[]}],"coverage":[]}