Communication and Collaboration

In Discourse versions prior to 3.5.4, 2025.11.2, 2025.12.1 and 2026.1.0 a medium severity vulnerability CVE-2025-68659 was detected. This vulnerability allows attackers to trigger an application-level denial of service by sending oversized JSON payloads to the username change endpoint (PUT /u//preferences/username), causing server delays and resource exhaustion that degrade performance for other users and services. To address this issue, users should upgrade Discourse to versions 3.5.4, 2025.11.2, 2025.12.1 or 2026.1.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-68659.

In Discourse versions prior to 3.5.4, 2025.11.2, 2025.12.1 and 2026.1.0 a high severity vulnerability CVE-2025-68479 was detected. This vulnerability allows attackers to take over subscriptions due to missing ownership checks in certain subscription-related endpoints. To address this issue, users should upgrade Discourse to versions 3.5.4, 2025.11.2, 2025.12.1 or 2026.1.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-68479.

In Discourse versions prior to 3.5.4, 2025.11.2, 2025.12.1 and 2026.1.0 a medium severity vulnerability CVE-2025-67723 was detected. This vulnerability allows stored Cross-Site Scripting (XSS) attacks via the Discourse Math plugin when using the KaTeX renderer, despite content security policy mitigations. To address this issue, users should upgrade Discourse to versions 3.5.4, 2025.11.2, 2025.12.1 or 2026.1.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-67723.

In Discourse versions prior to 3.5.4, 2025.11.2, 2025.12.1 and 2026.1.0 a medium severity vulnerability CVE-2025-66488 was detected. This vulnerability affects installations using Amazon S3 for uploads and allows scripts to be executed in the context of the S3 or CDN domain due to improper handling of uploaded HTML or XML files. To address this issue, users should upgrade Discourse to versions 3.5.4, 2025.11.2, 2025.12.1 or 2026.1.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-66488.

In Discourse versions prior to 3.5.3, 2025.11.1 and 2025.12.0 a medium severity vulnerability CVE-2025-64528 was detected. This vulnerability allows attackers to discover user identities by searching for partial usernames, even when the enable_names setting is disabled, potentially exposing private user information through the UI or API. To address this issue, users should upgrade Discourse to versions 3.5.3, 2025.11.1, 2025.12.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-64528.

In Mattermost versions 11.1.x ≤ 11.1.0, 11.0.x ≤ 11.0.5, 10.12.x ≤ 10.12.3 and 10.11.x ≤ 10.11.7 a medium severity vulnerability CVE-2025-64641 was detected. This vulnerability allows attackers to exfiltrate Jira issue data by crafting malicious post actions that abuse the share-issue-publicly endpoint, due to insufficient validation that such actions originate from the official Jira plugin. To address this issue, users should upgrade Mattermost to versions 11.2.0, 11.1.1, 11.0.6, 10.12.4, 10.11.8 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-64641.

In Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 and Mattermost Jira plugin versions <=4.4.0 a medium severity vulnerability CVE-2025-14273 was detected. This vulnerability allows unauthenticated attackers to issue forged GET and POST requests to the Jira server by spoofing user IDs and injecting arbitrary issue key paths due to improper enforcement of authentication and path restrictions in the Jira plugin. To address this issue, users should upgrade Mattermost to versions 11.2.0, 11.1.1, 11.0.6, 10.12.4, 10.11.8 or later and Mattermost Jira plugin to version 4.4.1 or higher. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-14273.

In Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3 and 10.11.x <= 10.11.7 a medium severity vulnerability CVE-2025-13767 was detected. This vulnerability allows attackers to read content and attachments from private channels without proper membership validation when using the Jira plugin. To address this issue, users should upgrade Mattermost to versions 11.2.0, 11.1.1, 11.0.6, 10.12.4, 10.11.8 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-13767.

In Mattermost versions 10.11.x up to and including 10.11.5, 11.0.x up to and including 11.0.4, and 10.12.x up to and including 10.12.2 a medium severity vulnerability CVE-2025-13324 was detected. This vulnerability allows attackers who intercept invite tokens to reuse them after initial use, enabling unauthorized manipulation of channel memberships, including adding or removing users from private channels via a token replay attack. To address this issue, users should upgrade Mattermost to versions 11.1.0, 10.11.6, 11.0.5, 10.12.3 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-13324.