Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-55035 EUVD-2025-34773GHSA-3359-25fv-h37v

Mattermost Desktop DoS when user has basic authentication server configured

Published Oct 16, 2025 · Updated Oct 16, 2025 · Assigned by Mattermost

Description

Mattermost Desktop App versions <=5.13.0 fail to manage modals in the Mattermost Desktop App that stops a user with a server that uses basic authentication from accessing their server which allows an attacker that provides a malicious server to the user to deny use of the Desktop App via having the user configure the malicious server and forcing a modal popup that cannot be closed.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 5.0.13 5.13.1.0

Advisories 1

References