CVE-2023-7114

Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server...

CVE-2023-7114

Mattermost 2.10.0 and earlier is affected by a CSRF vulnerability caused by failure to sanitize deeplink paths in the server. The issue affects the way deeplink paths are handled, enabling cross-site request forgery attacks against Mattermost servers. The connected documents consistently identify...