CVE-2025-59480
Inadequate validation of SSO redirect credentials permits credential theft
概要
Inadequate validation of SSO redirect credentials permits credential theft
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com