Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wmx6-cwpq-6j42

Опубликовано: 19 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations.

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations.

EPSS

Процентиль: 48%
0.00246
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 2
nvd
больше 3 лет назад

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations.

CVSS3: 2
debian
больше 3 лет назад

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML conte ...

EPSS

Процентиль: 48%
0.00246
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79