CVE-2025-6233

Description

Mattermost Path Traversal vulnerability in github.com/mattermost/mattermost-server

Affected packages (6)

• Go/github.com/mattermost/mattermost-server>= 10.8.0, < 10.8.2
• Go/github.com/mattermost/mattermost-server>= 9.11.0+incompatible, < 9.11.17+incompatible, >= 10.5.0+incompatible, < 10.5.8+incompatible, >= 10.7.0+incompatible, < 10.7.4+incompatible, >= 10.8.0+incompatible, < 10.8.2+incompatible
• Go/github.com/mattermost/mattermost-server/v5from 0
• Go/github.com/mattermost/mattermost-server/v6from 0
• Go/github.com/mattermost/mattermost/server/v8from 0, < 8.0.0-20250529054450-d38c27f96fcf
• Go/github.com/mattermost/mattermost/server/v8from 0, < 8.0.0-20250529054450-d38c27f96fcf

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-wvw2-3jh4-4c39
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-6233
• PATCHhttps://github.com/mattermost/mattermost
• WEBhttps://github.com/mattermost/mattermost/commit/d38c27f96fcf754c36f231d1f2e9dbd48ad40bab
• WEBhttps://mattermost.com/security-updates