CVE-2016-11071

creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:37+00:00| seen| https://t.me/cibsecurity/12948...

CVE-2016-11071

Mattermost Server (before 3.1.0) is vulnerable to XSS via missing noreferrer and noopener link-rel protection. The root cause is failure to apply proper link relationship attributes, enabling malicious scripts when users click crafted links. Remediation: upgrade github.com/mattermost/mattermost-s...