← CVE Intelligence

CVE-2023-7114

Mattermost / Mattermost PUBLISHED

Description (CNA)

Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 2.10.0; unaffected 2.10.1 through 2.10.0

CWE

CWE-74

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.