Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-14573 Mattermost Team Invite Permission Bypass Vulnerability in Versions 10.11.x <= 10.11.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14573
Post summary
The text announces CVE-2025-14573, a permission bypass vulnerability affecting Mattermost Team Invite in specific versions 10.11.x and <=10.11.9.
CVE-2025-14573 Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to … https://www.cve.org/CVERecord?id=CVE-2025-14573
Post summary
The post announces a vulnerability (CVE‑2025‑14573) in Mattermost that allows permission bypass during team setting updates, without referencing a PoC, exploit, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mattermost | mattermost_server | - | - | - |