Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/06 6:30 p.m.8 views

GHSA-FFX7-34P2-VM3W Mattermost Confluence plugin doesn't properly escape user-controlled display names in HTML template rendering

Mattermost Confluence plugin version 1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows authenticated Confluence users with malicious display names to execute arbitrary JavaScript in victim browsers via sending a specially crafted OAuth2 connectio...

7.7CVSS5.9AI score0.00189EPSS
SaveExploits0References3
Rows per page
Query Builder