Vulnerability Database

315,049

Total vulnerabilities in the database

CVE-2025-11777

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the Add Channel Member API which allows users from one team to access user metadata and channel membership information from other teams via the API endpoint

  • Published: Nov 13, 2025
  • Updated: Nov 14, 2025
  • CVE: CVE-2025-11777
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.1
  • AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
mattermost / mattermost_server 10.5.0 10.5.12
mattermost / mattermost_server 10.11.0 10.11.4