Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2023/05/29 9:07 a.m.•24 views

CVE-2023-2808 Lack of URL normalization allows rendering previews for disallowed domains

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

4.3CVSS5.9AI score0.00408EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/05/29 9:07 a.m.•47 views

CVE-2023-2808 Lack of URL normalization allows rendering previews for disallowed domains

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

4.3CVSS5.5AI score0.00408EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/29 12:00 a.m.•8 views

CVE-2023-2808: Improper Input Validation

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

5.3CVSS6AI score0.00408EPSS
SaveExploits0References2
Rows per page
Query Builder