CVE-2025-58084 — Mattermost Desktop App crashes when clicking on malformed external URL
Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash …
Published: 2025-10-13 · CVSS: 3.5 · CVSS 3.1
Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7