https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T16:35:02.751834+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2025-15206 bdu:2025-15206 2026-10-09T16:35:02.755042+00:00 bdu:2025-15206 https://vulnerability.circl.lu/vuln/fkie_cve-2025-12756 fkie_cve-2025-12756 2026-10-09T16:35:02.755098+00:00

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate user permissions when deleting comments in Boards, which allows an authenticated user with the editor role to delete comments created by other users.

 https://vulnerability.circl.lu/vuln/ghsa-p6gj-jc38-x2m7 GHSA-p6gj-jc38-x2m7 — Mattermost fails to validate user permissions when deleting comments in Boards 2026-10-09T16:35:02.755143+00:00

Affected: Go: github.com/mattermost/mattermost/server/v8, Go: github.com/mattermost/mattermost

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate user permissions when deleting comments in Boards, which allows an authenticated user with the editor role to delete comments created by other users.