GitHub Advisory DatabaseGHSA-HVXG-77MG-VRVPMattermost Desktop App Remote Code Execution
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Mattermost Desktop App versions <=5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim’s system via custom URI schemes.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| mattermost-desktop | lt | 5.8.0 |
Related
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%