CVE-2025-13767

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-13767
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-13767.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-13767
Aliases
Downstream
Related
Published
2025-12-24T08:01:27.157Z
Modified
2026-08-12T03:51:14.797069157Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin
Details

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.

Database specific 
{
    "cwe_ids": [
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13767.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "11.1.0"
                },
                {
                    "last_affected": "11.1.0"
                },
                {
                    "introduced": "11.0.0"
                },
                {
                    "last_affected": "11.0.5"
                },
                {
                    "introduced": "10.12.0"
                },
                {
                    "last_affected": "10.12.3"
                },
                {
                    "introduced": "10.11.0"
                },
                {
                    "last_affected": "10.11.7"
                }
            ]
        }
    ],
    "cna_assigner": "Mattermost"
}
References

Affected packages

Git / github.com/mattermost/mattermost

Affected ranges

Type
GIT
Repo
https://github.com/mattermost/mattermost
Events
Introduced
5b955468ea1ea8b56c0fb10feb258a36a767d7bb
Fixed
7c36acb68ce3c69defaea540623f794c84ecba93
Introduced
ba3dc1612ce8f37bf9814b1ea6364181fb5abd62
Fixed
463e0d0d3930782d3c975da26c991dcbfccd751c
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
92b1e705225d97ce54d9f720f2e7aa66dc2a086b
Introduced
e62f350cd7a896c45a0e025f44cb8915f5597854
Fixed
317025c411ec8c34381fdd4f137a17c63895a4f2
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "10.11.0"
        },
        {
            "fixed": "10.11.8"
        },
        {
            "introduced": "10.12.0"
        },
        {
            "fixed": "10.12.4"
        },
        {
            "introduced": "11.0.0"
        },
        {
            "fixed": "11.0.6"
        },
        {
            "introduced": "11.1.0"
        },
        {
            "fixed": "11.1.1"
        }
    ]
}

Affected versions

@mattermost/client@10.*
@mattermost/client@10.11.0
@mattermost/client@10.12.0
@mattermost/client@11.*
@mattermost/client@11.0.4
@mattermost/client@11.1.0
@mattermost/types@10.*
@mattermost/types@10.11.0
@mattermost/types@10.12.0
@mattermost/types@11.*
@mattermost/types@11.0.4
@mattermost/types@11.1.0
Other
cloud-2022-07-20-1
cloud-2022-08-10-1
cloud-2022-09-08-1
cloud-2022-10-06-1
cloud-2022-11-11-1
cloud-2022-11-24-1
mattermost-redux@10.*
mattermost-redux@10.11.0
mattermost-redux@10.12.0
mattermost-redux@11.*
mattermost-redux@11.0.4
mattermost-redux@11.1.0
preview-v0.*
preview-v0.1
server/public/v0.*
server/public/v0.0.10
server/public/v0.0.11
server/public/v0.0.12
server/public/v0.0.13
server/public/v0.0.14
server/public/v0.0.15
server/public/v0.0.16
server/public/v0.0.17
server/public/v0.0.18
server/public/v0.0.5
server/public/v0.0.6
server/public/v0.0.7
server/public/v0.0.8
server/public/v0.0.9
server/public/v0.1.0
server/public/v0.1.1
server/public/v0.1.10
server/public/v0.1.11
server/public/v0.1.12
server/public/v0.1.13
server/public/v0.1.14
server/public/v0.1.15
server/public/v0.1.16
server/public/v0.1.17
server/public/v0.1.18
server/public/v0.1.19
server/public/v0.1.2
server/public/v0.1.3
server/public/v0.1.4
server/public/v0.1.5
server/public/v0.1.6
server/public/v0.1.7
server/public/v0.1.8
server/public/v0.1.9
v0.*
v0.5.0
v10.*
v10.11.0
v10.11.0-rc3
v10.11.1
v10.11.1-rc1
v10.11.2
v10.11.2-rc1
v10.11.2-rc2
v10.11.3
v10.11.4
v10.11.4-rc1
v10.11.4-rc2
v10.11.4-rc3
v10.11.5
v10.11.6
v10.11.7
v10.12.0
v10.12.1
v10.12.1-rc1
v10.12.2
v10.12.3
v11.*
v11.0.0-alpha.1
v11.0.1
v11.0.1-rc1
v11.0.1-rc2
v11.0.1-rc3
v11.0.2
v11.0.3
v11.0.3-rc1
v11.0.4
v11.0.5
v11.1.0
v11.1.0-rc4
v11.1.1-rc1
v11.1.1-rc2
v4.*
v4.10.0-rc1
v4.2.0-rc1
v4.3.0-rc1
v4.4.0-rc1
v4.5.0-rc1
v4.6.0-rc1
v4.6.0-rc2
v4.7.0-rc1
v4.8.0-rc1
v4.9.0-rc1
v5.*
v5.0.0-rc1
v5.1.0-rc1
v5.2.0-rc1
v5.2.0-rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-13767.json"