Medium
Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin
Type: advisorySources: OSV
Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-13767
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 10:17 UTC · Revision 1
Source evidence
Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin
core-osv · Original sourcePublished 24 Dec 2025, 08:01 UTC
Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.
osv:CVE-2025-13767
Complete source record
{
"id": "d2ac3aba4ba7612b2d12b6f1ce95879ca82c3d2bc5496610fa29f67d7a74ff89",
"url": "https://osv.dev/vulnerability/CVE-2025-13767",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin",
"summary": "Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as comments to Jira issues, which allows an authenticated attacker with access to the Jira plugin to read post content and attachments from channels they do not have access to.",
"evidence": "osv:CVE-2025-13767",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2025-13767",
"aliases": [
"CVE-2025-13767",
"GHSA-fmqf-pmcm-8cx9",
"GO-2025-4259"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/mattermost/mattermost",
"type": "GIT",
"events": [
{
"introduced": "5b955468ea1ea8b56c0fb10feb258a36a767d7bb"
},
{
"fixed": "7c36acb68ce3c69defaea540623f794c84ecba93"
},
{
"introduced": "ba3dc1612ce8f37bf9814b1ea6364181fb5abd62"
},
{
"fixed": "463e0d0d3930782d3c975da26c991dcbfccd751c"
},
{
"introduced": "0"
},
{
"fixed": "92b1e705225d97ce54d9f720f2e7aa66dc2a086b"
},
{
"introduced": "e62f350cd7a896c45a0e025f44cb8915f5597854"
},
{
"fixed": "317025c411ec8c34381fdd4f137a17c63895a4f2"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.11.0"
},
{
"fixed": "10.11.8"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.12.0"
},
{
"fixed": "10.12.4"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "11.0.0"
},
{
"fixed": "11.0.6"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "11.1.0"
},
{
"fixed": "11.1.1"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v11.1.1-rc2",
"v11.1.1-rc1",
"v10.11.7",
"v10.12.3",
"v11.0.5",
"v11.1.0-rc4",
"v11.1.0",
"mattermost-redux@11.1.0",
"@mattermost/types@11.1.0",
"@mattermost/client@11.1.0",
"v10.11.6",
"mattermost-redux@11.0.4",
"@mattermost/types@11.0.4",
"@mattermost/client@11.0.4",
"v10.11.5",
"v10.12.2",
"v11.0.4",
"v11.0.3",
"v11.0.3-rc1",
"v10.12.1",
"v10.11.4-rc3",
"v10.11.4",
"v11.0.2",
"v10.11.4-rc2",
"v11.0.1-rc3",
"v11.0.1",
"v10.11.4-rc1",
"v10.12.1-rc1",
"v11.0.1-rc2",
"v11.0.1-rc1",
"v11.0.0-alpha.1",
"v10.11.3",
"server/public/v0.1.19",
"server/public/v0.1.18",
"v10.12.0",
"mattermost-redux@10.12.0",
"@mattermost/types@10.12.0",
"@mattermost/client@10.12.0",
"server/public/v0.1.17",
"v10.11.2-rc2",
"v10.11.2",
"v10.11.2-rc1",
"v10.11.1",
"v10.11.1-rc1",
"v10.11.0-rc3",
"v10.11.0",
"mattermost-redux@10.11.0",
"@mattermost/types@10.11.0",
"@mattermost/client@10.11.0",
"server/public/v0.1.16",
"preview-v0.1",
"server/public/v0.1.15",
"server/public/v0.1.14",
"server/public/v0.1.13",
"server/public/v0.1.12",
"server/public/v0.1.11",
"server/public/v0.1.10",
"server/public/v0.1.9",
"server/public/v0.1.8",
"server/public/v0.1.7",
"server/public/v0.1.6",
"server/public/v0.1.5",
"server/public/v0.1.4",
"server/public/v0.1.3",
"server/public/v0.1.2",
"server/public/v0.1.1",
"server/public/v0.1.0",
"server/public/v0.0.18",
"server/public/v0.0.17",
"server/public/v0.0.16",
"server/public/v0.0.15",
"server/public/v0.0.14",
"server/public/v0.0.13",
"server/public/v0.0.12",
"server/public/v0.0.11",
"server/public/v0.0.10",
"server/public/v0.0.9",
"server/public/v0.0.8",
"server/public/v0.0.7",
"server/public/v0.0.6",
"server/public/v0.0.5",
"cloud-2022-11-24-1",
"cloud-2022-11-11-1",
"cloud-2022-10-06-1",
"cloud-2022-09-08-1",
"cloud-2022-08-10-1",
"cloud-2022-07-20-1",
"v5.2.0-rc2",
"v5.2.0-rc1",
"v5.1.0-rc1",
"v5.0.0-rc1",
"v4.10.0-rc1",
"v4.9.0-rc1",
"v4.8.0-rc1",
"v4.7.0-rc1",
"v4.6.0-rc2",
"v4.6.0-rc1",
"v4.5.0-rc1",
"v4.4.0-rc1",
"v4.3.0-rc1",
"v4.2.0-rc1",
"v0.5.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-13767.json"
}
}
],
"modified": "2026-10-28T02:30:43.748248644Z",
"provider": "osv",
"references": [
"https://mattermost.com/security-updates",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13767.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-13767"
],
"provider_metadata": {
"cwe_ids": [
"CWE-863"
],
"cna_assigner": "Mattermost",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "11.1.0"
},
{
"last_affected": "11.1.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
}
]
},
{
"extracted_events": [
{
"range": [
{
"introduced": "11.0.0"
},
{
"last_affected": "11.0.5"
},
{
"introduced": "10.12.0"
},
{
"last_affected": "10.12.3"
},
{
"introduced": "10.11.0"
},
{
"last_affected": "10.11.7"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13767.json"
}
},
"related_cves": [
{
"value": "CVE-2025-13767",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 511594,
"published_at": "2025-12-24T08:01:27.157+00:00"
}