Lucene search
+L

3 matches found

OSV
OSV
•added 2023/05/29 9:07 a.m.•21 views

CVE-2023-2808 Lack of URL normalization allows rendering previews for disallowed domains

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

4.3CVSS6.1AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/05/29 9:07 a.m.•42 views

CVE-2023-2808 Lack of URL normalization allows rendering previews for disallowed domains

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

4.3CVSS5.5AI score0.00408EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/29 12:00 a.m.•2 views

CVE-2023-2808: Improper Input Validation

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link...

5.3CVSS5.8AI score0.00408EPSS
SaveExploits0References2
Rows per page
Query Builder