Descrição
Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading in a pop-up window in the Mattermost Desktop App which allows a malicious server owner to repeated crash the application via calling {{window.open(-javascript:alert()-);}}. Mattermost Advisory ID: MMSA-2026-00618
CVSS 6.5EPSS 0.184%Risco 0.66
Ver fonte- Publicação
- 2026-05-18 09:16:22
- Versões afetadas
- <= 6.1, <= 6.0.1, <= 5.4.13.0
- Tipo
- Installed app
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H