CompaniesMattermostMonthly reportsAugust 2025
Mattermost in August 2025: incidents, uptime and changes
0incidents posted
0labelled major or critical
100%free of major/critical
100%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 0 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
Incidents 0
Mattermost posted no incidents in August 2025.
CVEs published
- CVE-2025-44001 Unauthorized Channel Subscription Read in Mattermost Confluence Plugin (CVSS 4.0)
- CVE-2025-44004 Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin (CVSS 7.2)
- CVE-2025-48731 Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin (CVSS 6.4)
- CVE-2025-49221 Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin (CVSS 3.7)
- CVE-2025-52931 Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin (CVSS 7.5)
- CVE-2025-53514 Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin (CVSS 5.9)
- CVE-2025-53857 Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin (CVSS 3.7)
- CVE-2025-53910 Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin (CVSS 4.0)
- CVE-2025-54458 Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin (CVSS 5.0)
- CVE-2025-54463 Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin (CVSS 5.9)
- CVE-2025-54478 Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin (CVSS 7.2)
- CVE-2025-54525 Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin (CVSS 7.5)
- CVE-2025-8285 Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin (CVSS 4.0)
- CVE-2025-36530 Import Path Traversal Enables Unauthorized Unsigned Plugin Installation (CVSS 6.8)
- CVE-2025-49810 Thread summarization allows persistent access to channel (CVSS 3.5)
- CVE-2025-47700 AI plugin APIs can be triggered using post actions (CVSS 3.5)
- CVE-2025-53971 Channel and Team Membership APIs inadvertently allow loss of Member privileges. (CVSS 3.8)
- CVE-2025-8023 Path Traversal in Template Upload Allows Uploading Files Outside Target Directory (CVSS 6.8)
- CVE-2025-49222 Mattermost Shared Channel Upload Type Validation Bypass (CVSS 6.8)
- CVE-2025-47870 Team invite ID leaked to team admin with no member invite privileges (CVSS 4.3)
- CVE-2025-6465 Path traversal in image upload with preview overwrite (CVSS 4.3)
- CVE-2025-8402 Nil pointer dereference in bulk import crashes server (CVSS 4.9)
Cite this
Mattermost posted 0 status incidents in August 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Mattermost in August 2025
- Vendor
- Mattermost
- Date
- URL
- https://rewindex.com/company/mattermost/2025/08