Mattermost Desktop App versions <=5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| mattermost-desktop(npm) | 0 | 5.8.0 | N/A |
CVSS Metrics
