| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | ≥ 10.5.0+incompatible, < 10.5.2+incompatible≥ 9.11.0+incompatible, < 9.11.10+incompatible | 10.5.2+incompatible9.11.10+incompatible |
| github.com/mattermost/mattermost-server/v5 | all versions | |
| github.com/mattermost/mattermost-server/v6 | all versions | |
| github.com/mattermost/mattermost/server/v8 | ≥ 10.5.0, < 10.5.2≥ 9.11.0, < 9.11.10< 8.0.0-20250213231113-68c11e9ecb71 | 10.5.29.11.108.0.0-20250213231113-68c11e9ecb71 |
| mattermost server | ≥ 10.5.0, < 10.5.2≥ 9.11.0, < 9.11.10 | 10.5.29.11.10 |
Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to check if a file has been deleted when creating a bookmark which allows an attacker who knows the IDs of deleted files to obtain metadata of the files via bookmark creation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free