CVE-2025-13767

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-13767
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-13767.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-13767
Aliases
Downstream
Related
Published
2025-12-24T08:15:45.553Z
Modified
2026-03-12T17:37:49.718041Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.

References

Affected packages

Git / github.com/mattermost/mattermost-server

Affected ranges

Type
GIT
Repo
https://github.com/mattermost/mattermost-server
Events
Introduced
5b955468ea1ea8b56c0fb10feb258a36a767d7bb
Fixed
7c36acb68ce3c69defaea540623f794c84ecba93
Introduced
ba3dc1612ce8f37bf9814b1ea6364181fb5abd62
Fixed
463e0d0d3930782d3c975da26c991dcbfccd751c
Introduced
e62f350cd7a896c45a0e025f44cb8915f5597854
Fixed
317025c411ec8c34381fdd4f137a17c63895a4f2
Database specific 
{
    "versions": [
        {
            "introduced": "10.11.0"
        },
        {
            "fixed": "10.11.8"
        },
        {
            "introduced": "10.12.0"
        },
        {
            "fixed": "10.12.4"
        },
        {
            "introduced": "11.1.0"
        },
        {
            "fixed": "11.1.1"
        }
    ]
}

Affected versions

@mattermost/client@10.*
@mattermost/client@10.11.0
@mattermost/client@10.12.0
@mattermost/client@11.*
@mattermost/client@11.1.0
@mattermost/types@10.*
@mattermost/types@10.11.0
@mattermost/types@10.12.0
@mattermost/types@11.*
@mattermost/types@11.1.0
mattermost-redux@10.*
mattermost-redux@10.11.0
mattermost-redux@10.12.0
mattermost-redux@11.*
mattermost-redux@11.1.0
v10.*
v10.11.0
v10.11.0-rc3
v10.11.1
v10.11.1-rc1
v10.11.2
v10.11.2-rc1
v10.11.2-rc2
v10.11.3
v10.11.4
v10.11.4-rc1
v10.11.4-rc2
v10.11.4-rc3
v10.11.5
v10.11.6
v10.11.7
v10.12.0
v10.12.0-rc1
v10.12.0-rc2
v10.12.0-rc3
v10.12.1
v10.12.1-rc1
v10.12.2
v10.12.3
v11.*
v11.1.0
v11.1.0-rc4
v11.1.1-rc1
v11.1.1-rc2

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "11.0.0"
            },
            {
                "fixed": "11.0.6"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-13767.json"