Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-59480 1 Mattermost 2 Mattermost, Mattermost Mobile 2026-01-21 6.1 Medium
Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses