cve.bz

CVE-2025-14435

6.5 mediumEPSS 0.3%

Medium (6.5) in mattermost mattermost server. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in github.com/mattermost/mattermost-server 10.11.9, 10.11.9+incompatible, 11.0.7.

Mattermost versions 10.11.x <= 10.11.8, 11.1.x <= 11.1.1, 11.0.x <= 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE
CWE-770
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-mx8m-v8qm-xwr8Gogithub.com/mattermost/mattermost-server>=10.11.0 <10.11.910.11.9
GHSA-mx8m-v8qm-xwr8Gogithub.com/mattermost/mattermost-server>=11.1.0 <11.1.211.1.2
GHSA-mx8m-v8qm-xwr8Gogithub.com/mattermost/mattermost-server>=11.0.0 <11.0.711.0.7
GO-2026-4326Gogithub.com/mattermost/mattermost-server>=10.11.0+incompatible <10.11.9+incompatible
>=11.0.1+incompatible <11.0.7+incompatible
>=11.1.0+incompatible <11.1.2+incompatible		10.11.9+incompatible, 11.0.7+incompatible, 11.1.2+incompatible

References

Check your stackJSON