CVE-2025-58084: Mattermost Desktop App crashes when clicking on malformed external URL
Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Mattermost Desktop Appto a version that resolves this vulnerability.Fixed in 5.13.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58084?
CVE-2025-58084 is classified as a moderate severity vulnerability due to its potential to crash the user’s application.
How do I fix CVE-2025-58084?
To fix CVE-2025-58084, upgrade to Mattermost Desktop App version 5.13.1 or later.
What versions are affected by CVE-2025-58084?
CVE-2025-58084 affects all Mattermost Desktop App versions up to and including 5.13.0.
What type of attack does CVE-2025-58084 enable?
CVE-2025-58084 enables an attacker to send a malformed URL that can crash the user’s application.
Where can I find more information about CVE-2025-58084?
More information about CVE-2025-58084 can be found in Mattermost's official security updates.