Beveiligingsadvies

CVE-2023-7114

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-29 12:46:22

Laatst bijgewerkt 2024-09-09 17:28:54

Toegewezen door Mattermost

CVSS-score 7.1

Status PUBLISHED

Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.