← Back

CVE-2026-8683

nvd nist
Published: Jun 15, 2026Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: responsibledisclosure@mattermost.com (Secondary)

Description

Mattermost Desktop App versions <=6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a malicious server owner to crash the application via including a script to call window.open on a very large URL. Mattermost Advisory ID: MMSA-2026-00652

Affected (2)

Mattermost
1 product
Mattermost Desktop
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Mattermost
Mattermost Desktop
From 6.1.0 to 6.1.5
Mattermost Desktop
Up to 5.13.0

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

Source: responsibledisclosure@mattermost.com
Vendor Advisory

Timeline

No history available yet.