Description
Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost | ≤ 2.10.0 | 2.10.1 |
High · 7.1
CVE-2023-7114
EUVD-2023-59297GHSA-22fj-xvpx-pqm9
Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.
Published Dec 29, 2023 · Updated Sep 9, 2024 · Assigned by Mattermost