CVE-2025-13321 — Mattermost Desktop App logging sensitive information and fails to clear data on server deletion

CVE-2025-13321

Mattermost Desktop App logging sensitive information and fails to clear data on server deletion PUBLISHED

Description (CNA)

Mattermost Desktop App versions <6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 6.0.0; unaffected 6.0.0

CWE

CWE-532

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.