Code injection

2023-12-2913:15:00

PRIOn knowledge base

www.prio-n.com

mattermost

code injection

web client

security vulnerability

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client.

CPENameOperatorVersion
mattermost_serverlt8.1.7

CPE	Name	Operator	Version
	mattermost_server	lt	8.1.7

References

mattermost.com/security-updates