Low severityNVD Advisory· Published Jan 9, 2025· Updated Jan 9, 2025
Misleading UI for undefined admin console settings in Calls causes security confusion
CVE-2025-22445
Description
Mattermost versions 10.x <= 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/mattermost/mattermost/server/v8Go | >= 10.0, < 10.3.0 | 10.3.0 |
github.com/mattermost/mattermost/server/v8Go | < 8.0.0-20250102081831-64c566a8280b | 8.0.0-20250102081831-64c566a8280b |
Affected products
27- osv-coords26 versionspkg:apk/chainguard/mattermost-10.3pkg:apk/chainguard/mattermost-10.3-compatpkg:apk/chainguard/mattermost-10.4pkg:apk/chainguard/mattermost-10.4-compatpkg:apk/chainguard/mattermost-10.5pkg:apk/chainguard/mattermost-10.5-compatpkg:apk/chainguard/mattermost-9.11pkg:apk/chainguard/mattermost-9.11-compatpkg:apk/chainguard/mattermost-fips-10.5pkg:apk/chainguard/mattermost-fips-10.5-compatpkg:apk/chainguard/mattermost-fips-10.6pkg:apk/chainguard/mattermost-fips-10.6-compatpkg:apk/chainguard/mattermost-fips-10.7pkg:apk/chainguard/mattermost-fips-10.7-compatpkg:apk/chainguard/mattermost-fips-9.11pkg:apk/chainguard/mattermost-fips-9.11-compatpkg:apk/wolfi/mattermost-10.3pkg:apk/wolfi/mattermost-10.3-compatpkg:apk/wolfi/mattermost-10.4pkg:apk/wolfi/mattermost-10.4-compatpkg:apk/wolfi/mattermost-10.5pkg:apk/wolfi/mattermost-10.5-compatpkg:golang/github.com/mattermost/mattermost/server/v8pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweedpkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6
< 0+ 25 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 9.11.9-r0
- (no CPE)range: < 9.11.9-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 10.7.1-r1
- (no CPE)range: < 10.7.1-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: >= 10.0, < 10.3.0
- (no CPE)range: < 0.0.20250128T150132-150000.1.29.1
- (no CPE)range: < 0.0.20250109T194159-1.1
- (no CPE)range: < 0.0.20250128T150132-150000.1.29.1
- Range: 10.0.*
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-7rgp-4j56-fm79ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-22445ghsaADVISORY
- mattermost.com/security-updatesghsaWEB
News mentions
0No linked articles in our index yet.