# Mattermost in December 2025: incidents, uptime and changes

> Mattermost in December 2025: 0 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 12 CVEs. From Rewindex’s archive of Mattermost’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/mattermost/2025/12
Last updated: 2026-10-19T22:10:00Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 12
- Previous month: [November 2025](https://rewindex.com/company/mattermost/2025/11.md) · Next: [January 2026](https://rewindex.com/company/mattermost/2026/01.md) · [All months](https://rewindex.com/company/mattermost/reports.md) · [Mattermost](https://rewindex.com/company/mattermost.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2025-12756](https://rewindex.com/cve/CVE-2025-12756.md) Insecure Direct Object Reference in Mattermost Boards Plugin Enables Unauthorised Comment Deletion (CVSS 4.3), published 2025-12-01
- [CVE-2025-13870](https://rewindex.com/cve/CVE-2025-13870.md) Unauthorized access and subscription vulnerability in Boards (CVSS 3.1), published 2025-12-02
- [CVE-2025-62190](https://rewindex.com/cve/CVE-2025-62190.md) CSRF Allows Call Initiation and Message Delivery (CVSS 4.3), published 2025-12-17
- [CVE-2025-13352](https://rewindex.com/cve/CVE-2025-13352.md) Mattermost GitHub Plugin allows unauthorized GitHub reactions via reaction forwarding hijacking (CVSS 3.0), published 2025-12-17
- [CVE-2025-62690](https://rewindex.com/cve/CVE-2025-62690.md) Open redirect in error page when link opened in new tab (CVSS 3.1), published 2025-12-17
- [CVE-2025-12689](https://rewindex.com/cve/CVE-2025-12689.md) DoS in Calls plugin via malformed UTF-8 in WebSocket request (CVSS 6.5), published 2025-12-17
- [CVE-2025-13321](https://rewindex.com/cve/CVE-2025-13321.md) Mattermost Desktop App logging sensitive information and fails to clear data on server deletion (CVSS 3.3), published 2025-12-17
- [CVE-2025-13324](https://rewindex.com/cve/CVE-2025-13324.md) Lack of Invalidation of Legacy Remote Cluster Invite Tokens After Confirmation (CVSS 3.7), published 2025-12-17
- [CVE-2025-13326](https://rewindex.com/cve/CVE-2025-13326.md) Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store (CVSS 3.9), published 2025-12-17
- [CVE-2025-14273](https://rewindex.com/cve/CVE-2025-14273.md) Mattermost Jira plugin user spoofing enables Jira request forgery. (CVSS 7.2), published 2025-12-22
- [CVE-2025-13767](https://rewindex.com/cve/CVE-2025-13767.md) Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin (CVSS 4.3), published 2025-12-24
- [CVE-2025-64641](https://rewindex.com/cve/CVE-2025-64641.md) Mattermost Jira plugin crafted action leaks Jira issue details (CVSS 4.1), published 2025-12-24

## Cite this

Mattermost posted 0 status incidents in December 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/mattermost/2025/12
- Citation: Mattermost, “Mattermost in December 2025” (2025-12-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/mattermost/2025/12 (CC BY 4.0).
- Markdown link: `[Mattermost: Mattermost in December 2025 (2025-12-01)](https://rewindex.com/company/mattermost/2025/12)`


---
Canonical: https://rewindex.com/company/mattermost/2025/12 · Markdown: https://rewindex.com/company/mattermost/2025/12.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T14:41:34.670Z