CVE-2025-55035 — Mattermost Desktop DoS when user has basic authentication server configured

CVE-2025-55035

Mattermost Desktop DoS when user has basic authentication server configured PUBLISHED

Description (CNA)

Mattermost Desktop App versions <=5.13.0 fail to manage modals in the Mattermost Desktop App that stops a user with a server that uses basic authentication from accessing their server which allows an attacker that provides a malicious server to the user to deny use of the Desktop App via having the user configure the malicious server and forcing a modal popup that cannot be closed.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 5.0.13; unaffected 5.13.1.0

CWE

CWE-754

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.