PT-2025-51853

CVE-2025-13321

Published

2025-12-17

Updated

2025-12-17

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 6.0.0

Description The Mattermost Desktop App does not properly remove sensitive information from its logs or clear data when a server is deleted. This could allow an attacker who has access to a user's system to obtain potentially sensitive information by reading the application logs.

Recommendations Update to Mattermost Desktop App version 6.0.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Doyensec

Vendors

Affected products

Weakness enumeration

CWE-532: Insertion of Sensitive Information into Log File

Related identifiers