CVE-2016-11083

An issue was discovered in Mattermost Server before 2.2.0. It allows XSS because it configures files to be opened in a browser window...

CVE-2016-11083

CVE-2016-11083 affects Mattermost Server prior to 2.2.0. The issue enables cross-site scripting (XSS) by configuring files to be opened in a browser window, allowing embedded scripts to run under certain conditions. The vulnerability originates from how files are rendered, not from external input...