2023-12-29 12:46:13
Mattermost
PUBLISHED
Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client.