Description
Fixed a bypass for a reflected cross-site scripting vulnerability affecting OAuth-enabled instances of Mattermost.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost | 5.32.0 – ≤ 5.36.0 | 5.34.5 |
High · 7.1
CVE-2021-37859
EUVD-2021-24338GHSA-r4f6-w245-8wv4
Reflected XSS in OAuth Flow
Published Aug 5, 2021 · Updated Aug 4, 2024 · Assigned by Mattermost