Description (CNA)
Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an attacker to cause a denial-of-service by a linking to a specially crafted webpage in a message.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mattermost / Mattermost | affected 0 through 7.8.2; affected 0 through 7.9.1; unaffected 7.10.1; unaffected 7.8.3; unaffected 7.9.2; affected 7.10.0 |
CWE
CWE-400
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.