CVE 3.1 LOW

Open redirect in error page when link opened in new tab_CVE-2025-62690

3.1 / 10
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link opened in a new tab.

Basic Information

ID CVE-2025-62690
Source Mattermost
Published Dec 17, 2025 at 12:19

Affected Product

Vendor Mattermost
Product Mattermost
Version 10.11.0
Affected Versions Mattermost Mattermost 10.11.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.