Security Advisory

CVE-2026-3471

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-18 08:45:44

Last updated 2026-05-18 14:35:23

Assigner Mattermost

CVSS score 6.5

State PUBLISHED

Description

Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent an invalid URL from loading in a pop-up window in the Mattermost Desktop App which allows a malicious server owner to repeated crash the application via calling {{window.open('javascript:alert()');}}. Mattermost Advisory ID: MMSA-2026-00618

← Browse all CVEs View on cve.org ↗