CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-14822

Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.4%

CVSS Severity

CVSS v3 Score 3.1

References

https://mattermost.com/security-updates

Products affected by CVE-2025-14822

Mattermost » Mattermost Server » Version: 10.11.0

cpe:2.3:a:mattermost:mattermost_server:10.11.0
Mattermost » Mattermost Server » Version: 10.11.1

cpe:2.3:a:mattermost:mattermost_server:10.11.1
Mattermost » Mattermost Server » Version: 10.11.2

cpe:2.3:a:mattermost:mattermost_server:10.11.2
Mattermost » Mattermost Server » Version: 10.11.3

cpe:2.3:a:mattermost:mattermost_server:10.11.3
Mattermost » Mattermost Server » Version: 10.11.4

cpe:2.3:a:mattermost:mattermost_server:10.11.4
Mattermost » Mattermost Server » Version: 10.11.5

cpe:2.3:a:mattermost:mattermost_server:10.11.5
Mattermost » Mattermost Server » Version: 10.11.6

cpe:2.3:a:mattermost:mattermost_server:10.11.6
Mattermost » Mattermost Server » Version: 10.11.7

cpe:2.3:a:mattermost:mattermost_server:10.11.7
Mattermost » Mattermost Server » Version: 10.11.8

cpe:2.3:a:mattermost:mattermost_server:10.11.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-14822

Products

Pricing

Contact Us