{"id":"EUVD-2025-203890","enisaUuid":"ca8484cb-ba13-3118-86b1-ecfb218fd2c0","description":"Mattermost versions 10.11.x \u003c\u003d 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link opened in a new tab.","datePublished":"Dec 17, 2025, 12:19:17 PM","dateUpdated":"Dec 17, 2025, 2:45:57 PM","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","references":"https://mattermost.com/security-updates\n","aliases":"CVE-2025-62690\nGHSA-q66g-q98c-q454\n","assigner":"Mattermost","epss":0.15,"enisaIdProduct":[{"id":"f44b8365-5ac1-31f5-95f1-bfcb8fcfecd2","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.4"}],"enisaIdVendor":[{"id":"4b1f7de9-673b-3c13-a4d0-6dd164da490a","vendor":{"name":"Mattermost"}}],"enisaIdVulnerability":[{"id":"30e998c5-9ca4-37a9-91eb-691548e1d3c7","vulnerability":{"id":"GHSA-q66g-q98c-q454","description":"Mattermost has missing redirect URL validation","datePublished":"Dec 17, 2025, 3:34:53 PM","dateUpdated":"Dec 18, 2025, 3:25:38 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-62690\nhttps://github.com/mattermost/mattermost/commit/dad6bd7a1509054580a0898bbc0e026aac3b30cb\nhttps://github.com/mattermost/mattermost\nhttps://mattermost.com/security-updates\n","enisa_id":"EUVD-2025-203890\n","aliases":"CVE-2025-62690\nGHSA-q66g-q98c-q454\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"61a9a8f9-6bff-324c-aff1-025275149f97","vulnerability":{"id":"CVE-2025-62690","description":"Mattermost versions 10.11.x \u003c\u003d 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link opened in a new tab.","datePublished":"Dec 17, 2025, 12:19:17 PM","dateUpdated":"Dec 17, 2025, 2:45:57 PM","status":"PUBLISHED","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","references":"https://mattermost.com/security-updates\n","enisa_id":"EUVD-2025-203890\n","assigner":"Mattermost","epss":0.15,"dataProcessed":"Nov 2, 2026, 7:20:30 AM","vulnerabilityProduct":[{"id":"1f2f3508-3928-3725-9808-053862498957","product":{"name":"Mattermost","vendor":{"name":"Mattermost"}},"product_version":"10.11.0 ≤10.11.4"}],"vulnerabilityVendor":[{"id":"a5469b21-3a93-3ccb-99be-5a818506bb02","vendor":{"name":"Mattermost"}}]}}],"enisaIdAdvisory":[]}