← CVE Intelligence

CVE-2022-1002

HTML Injection while inviting Guests PUBLISHED

Description (CNA)

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected unspecified through 6.3

CWE

CWE-80

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.