← Database

CVE-2025-31947

MEDIUM CVSS: 5.8 Published: 2025-05-15 Modified: 2026-06-17

Description

Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost.

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-645

References