URL Validation Flaw in Mattermost Desktop App Impacts User Experience
CVE-2025-58084

3.5LOW

Key Information:

Vendor

Mattermost
Status
Mattermost
Vendor
CVE Published:
13 October 2025

What is CVE-2025-58084?

The Mattermost Desktop App versions 5.13.0 and earlier contain a vulnerability that fails to properly validate URLs external to the configured servers. This oversight allows an attacker controlling a server within the user's configuration to send malformed URLs, potentially leading to crashes in the user's application. It is essential for users to ensure they are using the latest version of the software to mitigate potential disruptions.

Affected Version(s)

Mattermost 0 <= 5.13.0

Mattermost 5.13.1

References

https://mattermost.com/security-updates

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Doyensec
JSON
.
CVE-2025-58084 : URL Validation Flaw in Mattermost Desktop App Impacts User Experience