MEDIUM 6.1 Go
Mattermost Server is vulnerable to XSS through author_link field in Slack attachments
GHSA-498j-wxww-j897 · CVE-2017-18879 · GO-2025-4189
Published · Modified
Description
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the author_link field of a Slack attachment.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes