← Back

Mattermost Desktop

mattermost_desktop

Vendor: Mattermost • 34 CVEs

CVEs (34)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-37182
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Jun 14, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Mattermost Desktop App versions <=5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's syst...Show more
Mattermost Desktop App versions <=5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes.Show less
CVE-2024-36287
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Jun 14, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.
CVE-2023-5920
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Nov 2, 2023
N/A· v4
3.3 LOW· v3
N/A· v2
Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input.
CVE-2023-5876
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Nov 2, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enrolled server to mount a Denial Of Service.
CVE-2023-5875
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Nov 2, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowing media exploitation from a malicious mattermost server
CVE-2023-5339
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Oct 17, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Mattermost Desktop fails to set an appropriate log level during initial run after fresh installation resulting in logging all keystrokes including password entry being logged. 
CVE-2023-2000
1Mattermost
1Mattermost Desktop
Jun 17, 2026
May 2, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website
CVE-2016-11064
1Mattermost
1Mattermost Desktop
Nov 21, 2024
Jun 19, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Mattermost Desktop App before 3.4.0. Strings could be executed as code via injection.
CVE-2018-21265
1Mattermost
1Mattermost Desktop
Nov 21, 2024
Jun 19, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler (e.g., video, audio, and notifications).
CVE-2019-20861
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Jun 19, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Mattermost Desktop App before 4.2.2. It allows attackers to execute arbitrary code via a crafted link.
CVE-2019-20856
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Jun 19, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection.
CVE-2020-14456
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Jun 19, 2020
N/A· v4
7.3 HIGH· v3
7.5 HIGH· v2
An issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is mishandled during access-control decisions for web APIs, aka MMSA-2020-0006.
CVE-2020-14455
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Jun 19, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, allowing phishing, aka MMSA-2020-0007.
CVE-2020-14454
1Mattermost
1Mattermost Desktop
Jun 17, 2026
Jun 19, 2020
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandled, aka MMSA-2020-0008.