CSRF Allows Call Initiation and Message Delivery

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-62190 · Microsoft / collected KEV context

EUVD-2025-203892

GHSA-gmx5-frv9-9m9f

GO-2025-4254

cve-program · CVE-2025-62190

• https://mattermost.com/security-updates

euvd · EUVD-2025-203892

• https://mattermost.com/security-updates

nvd · CVE-2025-62190

• https://mattermost.com/security-updates

osv · GHSA-gmx5-frv9-9m9f

• https://nvd.nist.gov/vuln/detail/CVE-2025-62190
• https://github.com/mattermost/mattermost-plugin-calls/commit/429cfaf2a301a369414d1ca18a3364e85901c8d1
• https://github.com/mattermost/mattermost-plugin-calls
• https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.10.0
• https://mattermost.com/security-updates

osv · GO-2025-4254

• https://github.com/advisories/GHSA-gmx5-frv9-9m9f
• https://nvd.nist.gov/vuln/detail/CVE-2025-62190
• https://github.com/mattermost/mattermost-plugin-calls/commit/429cfaf2a301a369414d1ca18a3364e85901c8d1
• https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.10.0
• https://mattermost.com/security-updates

No related operational record is retained in the current change model.