cveboard RSS feed

CVE-2025-12419

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Account takeover on OAuth/OpenID-enabled servers

Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation privileges to take over a user account via manipulation of authentication data during the OAuth completion flow. This requires email verification to be disabled (default: disabled), OAuth/OpenID Connect to be enabled, and the attacker to control two users in the SSO system with one of them never having logged into Mattermost.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Mattermost

Vendor
Mattermost
Product
Mattermost
Platforms
Unknown
Default status
unaffected
Mattermost · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
10.12.0affectedsemverUnavailable10.12.1None listed
10.11.0affectedsemverUnavailable10.11.4None listed
10.5.0affectedsemverUnavailable10.5.12None listed
11.0.0affectedsemverUnavailable11.0.3None listed
11.1.0unaffectedUnavailableUnavailableUnavailableNone listed
10.12.2unaffectedUnavailableUnavailableUnavailableNone listed
10.11.5unaffectedUnavailableUnavailableUnavailableNone listed
10.5.13unaffectedUnavailableUnavailableUnavailableNone listed
11.0.4unaffectedUnavailableUnavailableUnavailableNone listed