Beveiligingsadvies

CVE-2023-2808

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-29 09:07:34
Laatst bijgewerkt 2024-12-06 23:04:02
Toegewezen door Mattermost
CVSS-score 4.3
Status PUBLISHED

Beschrijving

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.