CVE-2016-11079

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL...

CVE-2016-11079

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL...

CVE-2016-11079

Mattermost Server (github.com/mattermost/mattermost-server) contains an XSS flaw via the redirect URL in versions before 3.0.0. The root cause is improper handling/validation of the redirect URL parameter. Impact: attacker-supplied redirect can execute scripts in a user’s browser. Remediation: up...