Lucene search

CVE-2023-1421

🗓️ 15 Mar 2023 23:09:15Reported by MattermostType

A reflected cross-site scripting vulnerability in Mattermost OAuth flow completion endpoint

Reporter	Title	Published	Views	Family All 8
OSV	CVE-2023-1421	15 Mar 202323:15	–	osv
OSV	BIT-mattermost-2023-1421	6 Mar 202411:02	–	osv
Veracode	Cross-Site Scripting (XSS)	21 Mar 202308:45	–	veracode
Hacker One	Mattermost: Reflected XSS in OAuth complete endpoints	6 Mar 202221:01	–	hackerone
Cvelist	CVE-2023-1421 Reflected XSS in OAuth flow completion endpoints	15 Mar 202322:51	–	cvelist
Prion	Cross site scripting	15 Mar 202323:15	–	prion
Vulnrichment	CVE-2023-1421 Reflected XSS in OAuth flow completion endpoints	15 Mar 202322:51	–	vulnrichment
NVD	CVE-2023-1421	15 Mar 202323:15	–	nvd

Nvd

Node

mattermost mattermost_serverRange5.32.0–7.7.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "lessThan": "7.7",
        "status": "affected",
        "version": "5.32.0",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "7.7"
      }
    ]
  }
]

Source	Link
mattermost	www.mattermost.com/security-updates/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Mar 2023 23:15Current

4.7Medium risk

Vulners AI Score4.7

CVSS33.5 - 6.1

EPSS0.00072

SSVC

CWE-79