CPE Details
Mattermost Desktop 5.8.0 Release Candidate 1
5.8.0
2025-01-10
17h38 +00:00
17h38 +00:00
2025-01-10
17h38 +00:00
17h38 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:mattermost:mattermost_desktop:5.8.0:rc1:*:*:*:*:*:*
Informations
Vendor
mattermostProduct
mattermost_desktopVersion
5.8.0Update
rc1Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL. | 6.5 |
Moyen |
||
| Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access. | 6.5 |
Moyen |
||
| Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs. | 5.3 |
Moyen |
||
| Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machine. | 7.8 |
Haute |
