Executive brief
Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls
Affected products
- Go github.com/mattermost/mattermost-plugin-calls
Junglewise Threat Intelligence
CVE-2025-62190: GO-2025-4254 - Mattermost has CSRF vulnerability via Calls Widget page in github.com/mattermost/mattermost-plugin-calls
CVE-2025-62190 · Severity: low · CVSS 3.1 · Published 2025-12-30
Technologies: github.com/mattermost/mattermost-plugin-calls (Go). Vendors: Go.