Mattermost Desktop Security Vulnerabilities and Issues — Mattermost Desktop CVE List

Lucene search

MattermostMattermost Desktop

6 matches found

CVE•added 2023/11/02 9:15 a.m.•51 views

CVE-2023-5876

Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enrolled server to mount a Denial Of Service.

5.3CVSS4.6AI score0.00118EPSS

CVE•added 2023/05/02 9:15 a.m.•43 views

CVE-2023-2000

Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website

5.4CVSS5.5AI score0.00129EPSS

CVE•added 2023/11/02 9:15 a.m.•40 views

CVE-2023-5875

Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowing media exploitation from a malicious mattermost server

5.3CVSS4.7AI score0.00166EPSS

CVE•added 2020/06/19 5:15 p.m.•33 views

CVE-2018-21265

An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler (e.g., video, audio, and notifications).

5.3CVSS5.3AI score0.00195EPSS

CVE•added 2023/10/17 10:15 a.m.•26 views

CVE-2023-5339

Mattermost Desktop fails to set an appropriate log level during initial run after fresh installation resulting in logging all keystrokes including password entry being logged.

5.5CVSS5.1AI score0.00073EPSS

CVE•added 2024/09/16 3:15 p.m.•22 views

CVE-2024-39772

Mattermost Desktop App versions

5.3CVSS4.6AI score0.00106EPSS