Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

LDAP Injection

šŸ—“ļøĀ 12 Jun 2025Ā 07:03:14Reported byĀ Veracode Vulnerability DatabaseTypeĀ 
veracode
Ā veracodešŸ”—Ā sca.analysiscenter.veracode.comšŸ‘Ā 3Ā Views

Mattermost is susceptible to LDAP Injection due to improper validation of LDAP group ID attributes.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-4573
11 Jun 202513:30
ā€“circl
CNNVD		Mattermost ę³Øå…„ę¼ę“ž
11 Jun 202500:00
ā€“cnnvd
CVE		CVE-2025-4573
11 Jun 202510:22
ā€“cve
Cvelist		CVE-2025-4573 LDAP Injection in Mattermost Enterprise Edition When Using Active Directory
11 Jun 202510:22
ā€“cvelist
EUVD		EUVD-2025-18095
3 Oct 202520:07
ā€“euvd
Github Security Blog		Mattermost allows authenticated administrator to execute LDAP search filter injection
11 Jun 202512:30
ā€“github
NVD		CVE-2025-4573
11 Jun 202511:15
ā€“nvd
OPENSUSE Linux		govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media (moderate)
5 Jul 202500:00
ā€“opensuse
OSV		GHSA-4R67-4X4P-FPRG Mattermost allows authenticated administrator to execute LDAP search filter injection
11 Jun 202512:30
ā€“osv
OSV		GO-2025-3756 Mattermost allows authenticated administrator to execute LDAP search filter injection in github.com/mattermost/mattermost-server
11 Jun 202517:45
ā€“osv
Rows per page
Vulners
Node
mattermostgithub.com/mattermost/mattermost-serverRangev0.5.0ā€“0.5.0go
OR
mattermostgithub.com/mattermost/mattermost-serverRangev9.11.0-rc1ā€“9.11.0-rc1go
OR
mattermostgithub.com/mattermost/mattermost-serverRangev10.5.0-rc1ā€“v10.5.4go
OR
mattermostgithub.com/mattermost/mattermost-serverRangev10.6.0-rc1ā€“v10.6.3go
OR
mattermostgithub.com/mattermost/mattermost-serverRangev10.7.0-rc1ā€“v10.7.2go
OR
mattermostgithub.com/mattermost/mattermost-serverMatch10.7.0go
OR
mattermostgithub.com/mattermost/mattermost-serverMatch10.6.0go
OR
mattermostgithub.com/mattermost/mattermost-serverRange10.5.0ā€“10.5.2go
OR
mattermostgithub.com/mattermost/mattermost-serverRange9.11.0ā€“9.11.10go
OR
microsoftwindows_server_2008Range8.0.0-20240619142046-8181a9ddffc0ā€“8.0.0-20250414110750-c23f44fe8ed0go

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Jun 2026 09:29Current
4.2Medium risk
Vulners AI Score4.2
CVSS 3.14.1
EPSS0.00207
SSVC
mattermost ldap injection vulnerability improper validation api group id attribute
3