Mattermost Desktop App External Link Navigation Vulnerability

A vulnerability exists in the Mattermost Desktop App in versions through 5.13.3, where the application fails to properly restrict navigation to external websites. This oversight allows a malicious server to exploit preload script functionality by having a user open an external link within the Mattermost app, potentially exposing them to untrusted servers.

Impact

Exploitation of this vulnerability could lead to unauthorized access to preload script functionality, allowing for potential manipulation or interaction with untrusted servers.

Remediation

Users are advised to update to the latest version of the Mattermost Desktop App. Details on the security update will be posted on the Mattermost Security Updates page.