Lucene search

K
githubGitHub Advisory DatabaseGHSA-4GHX-8JW8-P76Q
HistoryNov 27, 2023 - 12:30 p.m.

Mattermost Open Redirect vulnerability

2023-11-2712:30:54
CWE-601
GitHub Advisory Database
github.com
4
mattermost
open redirect
vulnerability
redirect url
parameter
invalid custom url scheme
oauth

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

15.9%

Mattermost fails to properly check a redirect URL parameter allowing for anΒ open redirect was possible when the user clicked β€œBack to Mattermost” after providing a invalid custom url scheme in /oauth/{service}/mobile_login?redirect_to=

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

15.9%

Related for GHSA-4GHX-8JW8-P76Q