CVE-2025-9084

CVE-2025-9084 affects Mattermost Server 10.5.x ≤ 10.5.9, where the OAuth login redirect URLs are not properly validated, enabling open redirect to attacker‑controlled sites. Connected sources corroborate the issue in Mattermost Server and reference an affected range up to 10.5.9, with remediation...