Mattermost version 8.1.6 fails to sanitize channel mention data, allowing attacker to inject markup in web client
Reporter | Title | Published | Views | Family All 13 |
---|---|---|---|---|
![]() | BIT-mattermost-2023-7113 | 6 Mar 202410:56 | – | osv |
![]() | CGA-X6R4-4X4R-RJ58 | 25 Sep 202402:09 | – | osv |
![]() | CGA-JPXX-JXCP-J4H5 | 25 Sep 202401:56 | – | osv |
![]() | CGA-HPFV-F2F6-3F5H | 15 Jul 202422:00 | – | osv |
![]() | CGA-PCXV-43R4-92MM | 24 Jun 202414:34 | – | osv |
![]() | Mattermost Cross-site Scripting vulnerability | 29 Dec 202315:30 | – | osv |
![]() | GO-2024-2446 Mattermost Cross-site Scripting vulnerability in github.com/mattermost/mattermost-server | 28 Jun 202415:28 | – | osv |
![]() | CVE-2023-7113 | 29 Dec 202313:15 | – | nvd |
![]() | Cross-site Scripting (XSS) | 2 Jan 202408:45 | – | veracode |
![]() | CVE-2023-7113 | 29 Dec 202312:46 | – | cvelist |
Source | Link |
---|---|
mattermost | www.mattermost.com/security-updates |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo