The vulnerability of the handleServeStandalone() function in the Mattermost plugin, which allows an attacker to perform a CSRF attack on the Mattermost instant messaging application.

The vulnerability of the handleServeStandalone function in the Mattermost plugin for instant messaging applications is related to the manipulation of cross-site requests when processing the X-Calls-E2E header with a value of “true”. Exploiting this vulnerability could allow a malicious actor to...