Skip to content
OpenAdvisories
Medium WID-SEC-2025-2056 2 CVEs

Mattermost Desktop: Schwachstellen ermöglichten Denial of Service

Published Sep 15, 2025 · Updated Nov 17, 2025 · Revision 3 · de-DE

Vendor: Mattermost Product: Mattermost Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann eine Schwachstelle in Mattermost Desktop ausnutzen, um einen Denial of Service zu verursachen.

Product

Mattermost ist ein webbasierter Instant-Messaging-Dienst.

Vulnerabilities 2

  • Medium 6.1
    CVE-2025-55035

    Mattermost Desktop DoS when user has basic authentication server configured

    Mattermost Desktop App versions <=5.13.0 fail to manage modals in the Mattermost Desktop App that stops a user with a server that uses basic authentication from accessing their server which allows an attacker that provides a malicious server to the user to de…

    Mattermost Mattermost
  • Low 3.5
    CVE-2025-58084

    Mattermost Desktop App crashes when clicking on malformed external URL

    Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL.

    Mattermost Mattermost

Revision history

  1. #3

    Anpassung aufgrund neuer Informationen von Mattermost

  2. #2

    Ergänzung

  3. #1

    Initiale Fassung

References