CyberRota Analysis
AI-GeneratedThe Mattermost Desktop App versions up to 6.2.2.0 are vulnerable due to inadequate validation of URL schemes, which can be exploited by an attacker positioned on the network to load a plugin popout window over an insecure connection. This flaw could lead to potential exposure of sensitive information or unauthorized actions within the application. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation.
Original NVD Description
Mattermost Desktop App versions <=6.2 6.2.2.0 fail to validate the URL scheme when checking whether a target URL is internal to the connected server, which allows a network-positioned attacker to load a plugin popout window over an insecure connection via a link using a downgraded URL scheme. Mattermost Advisory ID: MMSA-2026-00717
Related CVEs
Other vulnerabilities affecting the same vendor(s)