Beschreibung
Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading in a pop-up window in the Mattermost Desktop App which allows a malicious server owner to repeated crash the application via calling {{window.open(-javascript:alert()-);}}. Mattermost Advisory ID: MMSA-2026-00618
CVSS 6.5EPSS 0.184%Risiko 0.66
Quelle öffnen- Veröffentlicht
- 2026-05-18 09:16:22
- Betroffene Versionen
- <= 6.1, <= 6.0.1, <= 5.4.13.0
- Typ
- Installed app
- Vektor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H