CVE-2024-37182
Lack of permissions prompting when opening external URLs
Résumé
Lack of permissions prompting when opening external URLs
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Desktop App versions <=5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com