Beveiligingsadvies

CVE-2025-59480

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-13 17:32:04

Laatst bijgewerkt 2025-11-13 18:02:26

Toegewezen door Mattermost

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses

← Alle CVE's bekijken Bekijk op cve.org ↗