CVE-2025-55035: mattermost desktop before 5.13.1.0 (exclusive); +1 more affected products

Affected technology

mattermost desktop · before 5.13.1.0 (exclusive)
mattermost

Mattermost · 0 through 5.0.13
Mattermost

Description’s affected range: versions <=5.13.0 fail to manage modals in the Mattermost Desktop App that stops a user with a server that uses basic authentication from accessing their server which allows an attacker that provides a malicious server to the user to deny use of the Desktop App via having the user configure the malicious server and forcing a modal popup that cannot be closed

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

An attacker that provides a malicious server to the user can deny use of the Desktop App via having the user configure the malicious server and forcing a modal popup that cannot be closed. Vendor/CNA’s CVSS 3.1 assessment (base score 6.1/10) rates confidentiality and integrity impact as none; availability impact as high.