Description
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the title_link field of a Slack attachment.
Unscored
CVE-2017-18880
EUVD-2017-9970GHSA-chcc-xph2-3gc9
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the title_link field of a Slack attachment.
Published Jun 19, 2020 · Updated Aug 5, 2024 · Assigned by mitre