CVE-2025-58084
BaseFortify
Publication date: 2025-10-13
Last updated on: 2025-10-29
Assigner: Mattermost, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mattermost | mattermost_desktop | to 5.13.1.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1287 | The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
Mattermost Desktop App versions up to 5.13.0 do not properly validate URLs that are external to the configured Mattermost servers. This flaw allows an attacker who controls a server that the user has configured to send a malformed URL, which can cause the user's application to crash.
How can this vulnerability impact me? :
This vulnerability can cause the Mattermost Desktop App to crash when a user receives a malformed URL from a malicious server. This may disrupt the user's ability to use the application reliably, potentially leading to denial of service for the user.