CVE-2025-14273
Published: 22 December 2025
Summary
CVE-2025-14273 is a high-severity Incorrect Implementation of Authentication Algorithm (CWE-303) vulnerability in Mattermost Mattermost Server. Its CVSS base score is 7.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 13.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and IA-2 (Identification and Authentication (Organizational Users)).
Deeper analysis
CVE-2025-14273 is a vulnerability in the Mattermost Jira plugin that fails to enforce authentication and issue-key path restrictions. It affects Mattermost versions 11.1.x up to and including 11.1.0, 11.0.x up to and including 11.0.5, 10.12.x up to and including 10.12.3, and 10.11.x up to and including 10.11.7 when the Jira plugin versions up to and including 4.4.0 is enabled. The issue, tied to CWE-303 (Incorrect Implementation of Authentication and Session Management), has a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L) and is documented under Mattermost Advisory ID MMSA-2025-00555.
An unauthenticated attacker who knows a valid Mattermost user ID can exploit this by crafting plugin payloads that spoof the user ID and inject arbitrary issue key paths. This enables the attacker to issue authenticated GET and POST requests to the connected Jira server on behalf of the spoofed user, potentially allowing unauthorized access or manipulation of Jira issues.
For mitigation details, refer to the Mattermost security advisory MMSA-2025-00555 available at https://mattermost.com/security-updates.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-204707
Vulnerability details
Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0 fail to enforce authentication and issue-key path restrictions in the Jira plugin, which allows an…
more
unauthenticated attacker who knows a valid user ID to issue authenticated GET and POST requests to the Jira server via crafted plugin payloads that spoof the user ID and inject arbitrary issue key paths. Mattermost Advisory ID: MMSA-2025-00555
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability in the Mattermost Jira plugin allows unauthenticated remote exploitation of a public-facing web application to spoof user IDs and perform unauthorized actions on the connected Jira server.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly addresses the plugin's failure to enforce authentication and issue-key path restrictions, preventing unauthenticated spoofed requests to the Jira server.
Strengthens identification and authentication for organizational users, mitigating user ID spoofing that enables authenticated requests on behalf of legitimate users.
Validates inputs in plugin payloads to block injection of arbitrary issue key paths by unauthenticated attackers.