CVE-2025-9084 Open redirect in OAuth login

Mattermost versions 10.5.x = 10.5.9 fail to properly validate redirect URLs which allows attackers to redirect users to malicious sites via crafted OAuth login URLs...

PT-2025-37469

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.0 through 10.5.9 Description Mattermost versions 10.5.x fail to properly validate redirect URLs, allowing attackers to redirect users to malicious sites via crafted OAuth login URLs. Recommendations At the moment, ther...