PT-2025-51853 · Mattermost · Mattermost Desktop App

Doyensec · Publicado 2025-12-17 · Atualizado 2025-12-17 · CVE-2025-13321

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 6.0.0

Description The Mattermost Desktop App does not properly remove sensitive information from its logs or clear data when a server is deleted. This could allow an attacker who has access to a user's system to obtain potentially sensitive information by reading the application logs.

Recommendations Update to Mattermost Desktop App version 6.0.0 or later.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2025-13321

GHSA-G6QX-WQ5W-WR8V

Produtos afetados

Mattermost Desktop App

Referências · 6

• https://twitter.com/CVEnew/status/2001365743204434001 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-13321 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2001421613506457906 · Publicação no Twitter
• https://t.me/CVEtracker/40058 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-13321 · Aviso do Fabricante
• https://mattermost.com/security-updates · Aviso do Fabricante