Unrated

Mattermost Desktop App crashes when clicking on malformed external URL

CVE-2025-58084 First seen on SecPulse Oct 14, 2025

Original description The description as published by the source.

Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web mattermost.com

Key facts

Severity: Unrated
Published: Oct 14, 2025
First seen on SecPulse: Oct 14, 2025
CWE: CWE-1287

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:10