Lucene search
+L

2 matches found

OSV
OSV
added 2026/06/26 2:42 p.m.4 views

CVE-2026-3472 Markdown image rendering bypass in AI bot tool result posts in Mattermost

Mattermost versions 10.11.x = 10.11.18, 11.6.x = 11.6.3, 11.5.x = 11.5.6 fail to properly apply markdown image rendering restrictions to AI bot tool result posts, which allows an authenticated attacker to exfiltrate data to an attacker-controlled server via injecting markdown image syntax into to...

3.5CVSS6AI score0.00194EPSS
SaveExploits0References3
Rows per page
Query Builder