Описание
Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an attacker to cause a denial-of-service by a linking to a specially crafted webpage in a message.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 7.8.0 (включая) до 7.8.3 (включая)Версия от 7.9.0 (включая) до 7.9.2 (включая)
Одно из
cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*
cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*
cpe:2.3:a:mattermost:mattermost:7.10.0:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00227
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-400
CWE-400
Связанные уязвимости
CVSS3: 6.5
debian
около 2 лет назад
Mattermost fails to validate links on external websites when construct ...
CVSS3: 6.5
github
около 2 лет назад
Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an attacker to cause a denial-of-service by a linking to a specially crafted webpage in a message.
EPSS
Процентиль: 46%
0.00227
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-400
CWE-400