CVE-2017-18907

An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. XSS could occur via a channel header...

CVE-2017-18907

Mattermost Server versions before 4.0.0, 3.10.2, and 3.9.2 are affected by a cross-site scripting (XSS) vulnerability that can be triggered via a channel header . The available documents describe the issue but do not disclose the exact root cause details beyond the header-based vector, nor provid...