Mattermost
0 remedies
cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*
0 remedies
- >= 10.7.0, <= 10.7.0
- >= 10.6.0, <= 10.6.2
- >= 10.5.0, <= 10.5.3
- >= 9.11.0, <= 9.11.12
Mattermost Google OAuth Credential Clearance Vulnerability in Bot Account Conversion
Vulnerability
A vulnerability exists in Mattermost versions 10.7.x through 10.7.0, 10.6.x through 10.6.2, 10.5.x through 10.5.3, and 9.11.x through 9.11.12. These versions fail to properly clear Google OAuth credentials when user accounts are converted to bot accounts. This oversight allows attackers to gain unauthorized access to bot accounts through the Google OAuth signup process.
Impact
Exploitation of this vulnerability could lead to unauthorized access to bot accounts.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
3.1impact
5.0exploitability
7.4remediation
0.0relevance
0.1threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.