← CVE Intelligence

CVE-2023-47168

Open redirect in /oauth/<service>/mobile_login?redirect_to= PUBLISHED

Description (CNA)

Mattermost fails to properly check a redirect URL parameter allowing for an open redirect was possible when the user clicked "Back to Mattermost" after providing a invalid custom url scheme in /oauth/{service}/mobile_login?redirect_to=

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 8.1.3; affected 0 through 7.8.12; affected 0 through 9.0.1; affected 0 through 9.1.0; unaffected 9.0.2; unaffected 9.1.1; unaffected 7.8.13; unaffected 8.1.4

CWE

CWE-601

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.