CVE-2025-4573 | Mattermost up to 9.11.13/10.5.4/10.6.3/10.7.1 LDAP Search Filter link objectGUID ldap injection

A vulnerability has been found in Mattermost up to 9.11.13/10.5.4/10.6.3/10.7.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /api/v4/ldap/groups/{remote_id}/link of the component LDAP Search Filter. The manipulation of the argument objectGUID leads to ldap injection.

This vulnerability is known as CVE-2025-4573. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.