CVE-2025-62690 — Open redirect in error page when link opened in new tab
Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link op…
Published: 2025-12-17 · CVSS: 3.1 · CVSS 3.1
Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link opened in a new tab.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7