deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-gqv7-j2j8-qmwq
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 11.2.0-rc1, < 11.2.3
Patched in: 11.2.3

Summary: Mattermost fails to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows an attacker to perform SSRF attacks against internal services via IPv4-mapped IPv6 literals (e.g., [::ffff:127.0.0.1]).. Mattermost Advisory ID: MMSA-2026-00585
GitHub Security Advisory: GHSA-gqv7-j2j8-qmwq
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 10.11.0-rc1, < 10.11.11
Patched in: 10.11.11

Summary: Mattermost fails to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows an attacker to perform SSRF attacks against internal services via IPv4-mapped IPv6 literals (e.g., [::ffff:127.0.0.1]).. Mattermost Advisory ID: MMSA-2026-00585
GitHub Security Advisory: GHSA-gqv7-j2j8-qmwq
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: < 5.3.2-0[PII_REDACTED]3647-5d787969c2d5
Patched in: 5.3.2-0[PII_REDACTED]3647-5d787969c2d5

Summary: Mattermost fails to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows an attacker to perform SSRF attacks against internal services via IPv4-mapped IPv6 literals (e.g., [::ffff:127.0.0.1]).. Mattermost Advisory ID: MMSA-2026-00585
GitHub Security Advisory: GHSA-gqv7-j2j8-qmwq
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: < 8.0.0[PII_REDACTED]3647-5d787969c2d5
Patched in: 8.0.0[PII_REDACTED]3647-5d787969c2d5

Summary: Mattermost fails to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows an attacker to perform SSRF attacks against internal services via IPv4-mapped IPv6 literals (e.g., [::ffff:127.0.0.1]).. Mattermost Advisory ID: MMSA-2026-00585
GitHub Security Advisory: GHSA-cwfj-642j-gfh4
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 11.3.0-rc1, < 11.3.1
Patched in: 11.3.1

Summary: Mattermost fails to properly enforce read permissions in search API endpoints

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554
GitHub Security Advisory: GHSA-cwfj-642j-gfh4
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 11.2.0-rc1, < 11.2.3
Patched in: 11.2.3

Summary: Mattermost fails to properly enforce read permissions in search API endpoints

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554
GitHub Security Advisory: GHSA-cwfj-642j-gfh4
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: >= 10.11.0-rc1, < 10.11.11
Patched in: 10.11.11

Summary: Mattermost fails to properly enforce read permissions in search API endpoints

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554
GitHub Security Advisory: GHSA-cwfj-642j-gfh4
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: < 5.3.2-0[PII_REDACTED]2155-0481bd1fb045
Patched in: 5.3.2-0[PII_REDACTED]2155-0481bd1fb045

Summary: Mattermost fails to properly enforce read permissions in search API endpoints

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554
GitHub Security Advisory: GHSA-cwfj-642j-gfh4
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: < 8.0.0[PII_REDACTED]2155-0481bd1fb045
Patched in: 8.0.0[PII_REDACTED]2155-0481bd1fb045

Summary: Mattermost fails to properly enforce read permissions in search API endpoints

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554
GitHub Security Advisory: GHSA-5mr9-crcg-8wh2
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: >= 11.3.0-rc1, < 11.3.1
Patched in: 11.3.1

Summary: Mattermost fails to use consistent error responses when handling the /mute command

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated team member to enumerate private channels they are not authorized to know about via differing error messages for nonexistent versus private channels. Mattermost Advisory ID: MMSA-2026-00588
GitHub Security Advisory: GHSA-5mr9-crcg-8wh2
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: >= 11.2.0-rc1, < 11.2.3
Patched in: 11.2.3

Summary: Mattermost fails to use consistent error responses when handling the /mute command

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated team member to enumerate private channels they are not authorized to know about via differing error messages for nonexistent versus private channels. Mattermost Advisory ID: MMSA-2026-00588
GitHub Security Advisory: GHSA-5mr9-crcg-8wh2
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: >= 10.11.0-rc1, < 10.11.11
Patched in: 10.11.11

Summary: Mattermost fails to use consistent error responses when handling the /mute command

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated team member to enumerate private channels they are not authorized to know about via differing error messages for nonexistent versus private channels. Mattermost Advisory ID: MMSA-2026-00588
GitHub Security Advisory: GHSA-5mr9-crcg-8wh2
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: < 5.3.2-0[PII_REDACTED]4323-5bb5261c72fa
Patched in: 5.3.2-0[PII_REDACTED]4323-5bb5261c72fa

Summary: Mattermost fails to use consistent error responses when handling the /mute command

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated team member to enumerate private channels they are not authorized to know about via differing error messages for nonexistent versus private channels. Mattermost Advisory ID: MMSA-2026-00588
GitHub Security Advisory: GHSA-5mr9-crcg-8wh2
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: < 8.0.0[PII_REDACTED]4323-5bb5261c72fa
Patched in: 8.0.0[PII_REDACTED]4323-5bb5261c72fa

Summary: Mattermost fails to use consistent error responses when handling the /mute command

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated team member to enumerate private channels they are not authorized to know about via differing error messages for nonexistent versus private channels. Mattermost Advisory ID: MMSA-2026-00588
GitHub Security Advisory: GHSA-jqcq-xjh3-6g23
Package: github.com/jackc/pgproto3/v2 (GO)
Severity: HIGH (CVSS 7.5)
CWE: CWE-129: Improper Validation of Array Index
Vulnerable versions: >= 2.0.0, <= 2.3.3
Patched in: unpatched

Summary: Denial of service in github.com/jackc/pgproto3/v2

Details:
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.
GitHub Security Advisory: GHSA-h9q6-hc68-35rp
Package: github.com/shamaton/msgpack/v3 (GO)
Severity: HIGH (CVSS 7.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: <= 3.1.0
Patched in: unpatched

Summary: Denial of service in github.com/shamaton/msgpack

Details:
The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack.
GitHub Security Advisory: GHSA-h9q6-hc68-35rp
Package: github.com/shamaton/msgpack/v2 (GO)
Severity: HIGH (CVSS 7.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: <= 2.4.0
Patched in: unpatched

Summary: Denial of service in github.com/shamaton/msgpack

Details:
The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack.
GitHub Security Advisory: GHSA-68j5-4m99-w9w9
Package: https://github.com/filebrowser/filebrowser (GO)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-284: Improper Access Control, CWE-639: Authorization Bypass Through User-Controlled Key, CWE-863: Incorrect Authorization
Vulnerable versions: <= 2.61.0
Patched in: unpatched

Summary: File Browser has an Authorization Policy Bypass in Public Share Download Flow

Details:
### Summary
A permission enforcement flaw allows users without download privileges (`download=false`) to still expose and retrieve file content via public share links when they retain share privileges (`share=true`). This bypasses intended access control policy and enables unauthorized data exfiltration to unauthenticated users. Where download restrictions are used for data-loss prevention or role separation.

### Details
The backend applies inconsistent authorization checks across download paths:

- Direct raw download correctly enforces `Perm.Download`:
  - [[raw.go](https://github.com/filebrowser/filebrowser/blob/master/http/raw.go#82)](filebrowser/http/raw.go:82)
- Share creation only enforces `Perm.Share`:
  - [[share.go](https://github.com/filebrowser/filebrowser/blob/master/http/share.go#21)](filebrowser/http/share.go:21)
- Public share/download handlers serve shared content without verifying owner `Perm.Download`:
  - [public.go](https://github.com/filebrowser/filebrowser/blob/master/http/public.go#18)(filebrowser/http/public.go:18)
  - [public.go](https://github.com/filebrowser/filebrowser/blob/master/http/public.go#116)(filebrowser/http/public.go:116)

As a result, a user who is blocked from direct downloads can create a share and obtain the same file via `/api/public/dl/<hash>`.

### PoC

1. Create a non-admin user with:
- `perm.share = true`
- `perm.download = false`

2. Login as that user and upload a **PDF** file:
- `POST /api/resources/nodl_secret_<rand>.pdf` with `Content-Type: application/pdf`

3. Verify direct raw download is denied:
- `GET /api/raw/nodl_secret_<rand>.pdf`
- Expected and observed: `202 Accepted` (blocked)

4. Create share for same file:
- `POST /api/share/nodl_secret_<rand>.pdf`
- Observed: `200`, response includes `hash` (example: `qxfK3JMG`)

5. Download publicly without authentication:
- `GET /api/public/dl/<hash>`
- Observed (vulnerable): `200`, `Content-Type: application/pdf`, and PDF bytes are returned

Live evidence captured (March 1, 2026):
- `create user`: `201`
- `create file`: `200`
- `direct /api/raw`: `202 Accepted`
- `create share`: `200`
- `public download /api/public/dl/mxK-ppZb`: `200`
- `public download content-type`: `application/pdf`
- `public download body length`: `327` bytes

### Impact
This is an **access control / authorization policy bypass** vulnerability.

- **Who can exploit:** Any authenticated user granted `share=true` but denied `download`.
- **Who is impacted:** Operators and organizations relying on download restrictions to prevent data export.
- **What can happen:** Restricted users can still distribute and retrieve files publicly, including unauthenticated access through share URLs.
GitHub Security Advisory: GHSA-594f-3595-c47v
Package: github.com/argoproj-labs/terraform-provider-argocd (GO)
Severity: MODERATE (CVSS 4.8)
CWE: CWE-295: Improper Certificate Validation, CWE-1395: Dependency on Vulnerable Third-Party Component
Vulnerable versions: < 1.2.3-0[PII_REDACTED]2343-b3364f3f32e7
Patched in: 1.2.3-0[PII_REDACTED]2343-b3364f3f32e7

Summary: Terraform Provider for ArgoCD has possible exposure to GO-2026-4337 / CVE-2025-68121

Details:
### Summary
The terraform-provider-argocd might have been vulnerable to GO-2026-4337 / CVE-2025-68121 ("Unexpected session resumption in crypto/tls").

### Details

See https://pkg.go.dev/vuln/GO-2026-4337 for the upstream vulnerability.

Provider versions starting with `v7.15.1` are using `go 1.25.8` for building and are thus no longer affected.
GitHub Security Advisory: GHSA-4p9m-8gc4-rw2h
Package: github.com/osrg/gobgp/v4 (GO)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: <= 4.3.0
Patched in: unpatched

Summary: GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute

Details:
An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute.
GitHub Security Advisory: GHSA-3rhr-jr63-hwq5
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-201: Insertion of Sensitive Information Into Sent Data
Vulnerable versions: >= 11.3.0-rc1, < 11.3.1
Patched in: 11.3.1

Summary: Mattermost fails to preserve the redacted state of burn-on-read posts during deletion

Details:
Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read message contents via the WebSocket post deletion event. Mattermost Advisory ID: MMSA-2026-00579
GitHub Security Advisory: GHSA-3rhr-jr63-hwq5
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-201: Insertion of Sensitive Information Into Sent Data
Vulnerable versions: >= 11.2.0-rc1, < 11.2.3
Patched in: 11.2.3

Summary: Mattermost fails to preserve the redacted state of burn-on-read posts during deletion

Details:
Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read message contents via the WebSocket post deletion event. Mattermost Advisory ID: MMSA-2026-00579
GitHub Security Advisory: GHSA-3rhr-jr63-hwq5
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-201: Insertion of Sensitive Information Into Sent Data
Vulnerable versions: >= 10.11.0-rc1, < 10.11.11
Patched in: 10.11.11

Summary: Mattermost fails to preserve the redacted state of burn-on-read posts during deletion

Details:
Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read message contents via the WebSocket post deletion event. Mattermost Advisory ID: MMSA-2026-00579
GitHub Security Advisory: GHSA-3rhr-jr63-hwq5
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-201: Insertion of Sensitive Information Into Sent Data
Vulnerable versions: < 5.3.2-0[PII_REDACTED]2706-c6b205f0d770
Patched in: 5.3.2-0[PII_REDACTED]2706-c6b205f0d770

Summary: Mattermost fails to preserve the redacted state of burn-on-read posts during deletion

Details:
Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read message contents via the WebSocket post deletion event. Mattermost Advisory ID: MMSA-2026-00579
GitHub Security Advisory: GHSA-3rhr-jr63-hwq5
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-201: Insertion of Sensitive Information Into Sent Data
Vulnerable versions: < 8.0.0[PII_REDACTED]2706-c6b205f0d770
Patched in: 8.0.0[PII_REDACTED]2706-c6b205f0d770

Summary: Mattermost fails to preserve the redacted state of burn-on-read posts during deletion

Details:
Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read message contents via the WebSocket post deletion event. Mattermost Advisory ID: MMSA-2026-00579
GitHub Security Advisory: GHSA-fx49-m253-27jj
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization
Vulnerable versions: >= 11.3.0-rc1, < 11.3.1
Patched in: 11.3.1

Summary: Mattermost fails to filter invite IDs based on user permissions

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID: MMSA-2025-00565
GitHub Security Advisory: GHSA-fx49-m253-27jj
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization
Vulnerable versions: >= 11.2.0-rc1, < 11.2.3
Patched in: 11.2.3

Summary: Mattermost fails to filter invite IDs based on user permissions

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID: MMSA-2025-00565
GitHub Security Advisory: GHSA-fx49-m253-27jj
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization
Vulnerable versions: >= 10.11.0-rc1, < 10.11.11
Patched in: 10.11.11

Summary: Mattermost fails to filter invite IDs based on user permissions

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID: MMSA-2025-00565
GitHub Security Advisory: GHSA-fx49-m253-27jj
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization
Vulnerable versions: < 5.3.2-0[PII_REDACTED]4819-cc427af41b2a
Patched in: 5.3.2-0[PII_REDACTED]4819-cc427af41b2a

Summary: Mattermost fails to filter invite IDs based on user permissions

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID: MMSA-2025-00565
GitHub Security Advisory: GHSA-fx49-m253-27jj
Package: github.com/mattermost/mattermost/server/v8 (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization
Vulnerable versions: < 8.0.0[PII_REDACTED]4819-cc427af41b2a
Patched in: 8.0.0[PII_REDACTED]4819-cc427af41b2a

Summary: Mattermost fails to filter invite IDs based on user permissions

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID: MMSA-2025-00565
GitHub Security Advisory: GHSA-679f-wmrg-qf57
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization
Vulnerable versions: >= 11.3.0-rc1, < 11.3.1
Patched in: 11.3.1

Summary: Mattermost allows a removed team member to enumerate all public channels within a private team

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed team member to enumerate all public channels within a private team via the channel search API endpoint. Mattermost Advisory ID: MMSA-2025-00568
GitHub Security Advisory: GHSA-679f-wmrg-qf57
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization
Vulnerable versions: >= 11.2.0-rc1, < 11.2.3
Patched in: 11.2.3

Summary: Mattermost allows a removed team member to enumerate all public channels within a private team

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed team member to enumerate all public channels within a private team via the channel search API endpoint. Mattermost Advisory ID: MMSA-2025-00568
GitHub Security Advisory: GHSA-679f-wmrg-qf57
Package: github.com/mattermost/mattermost-server (GO)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization
Vulnerable versions: >= 10.11.0-rc1, < 10.11.11
Patched in: 10.11.11

Summary: Mattermost allows a removed team member to enumerate all public channels within a private team

Details:
Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed team member to enumerate all public channels within a private team via the channel search API endpoint. Mattermost Advisory ID: MMSA-2025-00568