VDB
GO-2025-4198
GO-2025-4198
PUBLISHED
Mattermost Server has low entropy for authorization data as an OAuth 2.0 Service Provider in github.com/mattermost/mattermost-server
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | mattermost/mattermost-server | 0, 4.2.0-rc1+incompatible, 4.3.0-rc1+incompatible |
Timeline
- Dec 8, 2025 CVE Published
- Mar 3, 2026 CVE Updated
- May 1, 2026 Security Advisory