VULNERABILITY INTELLIGENCE

CVE-2025-62690

CVSS score6.1 MEDIUM

EPSS probability0.15%

CISA KEVNot currently listed

Published2025-12-17

Last modified2026-10-13

Description

Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link opened in a new tab.