Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-20086

Insufficient Input Validation on Post Props

Description

Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 10.2.0affected
  • 9.11.0 to ≤ 9.11.5affected
  • 10.0.0 to ≤ 10.0.3affected
  • 10.1.0 to ≤ 10.1.3affected
  • 10.3.0unaffected
  • 10.2.1unaffected
  • 9.11.6unaffected
  • 10.0.4unaffected
  • 10.1.4unaffected

References