Mattermost Desktop App Pop-Up Window Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Mattermost Desktop App, affecting versions 6.1, 6.0.1, and 5.4.13.0. The issue arises because the application fails to block invalid URLs from opening in a pop-up window. This flaw allows a malicious server owner to repeatedly crash the application by using a JavaScript alert as the URL payload.

Impact

Exploitation of this vulnerability leads to a crash of the Mattermost Desktop application, causing a denial-of-service condition where the application becomes unresponsive or unavailable to the user.