high7.1
CVE-2021-37859
Fixed a bypass for a reflected cross-site scripting vulnerability affecting OAuth-enabled instances of Mattermost.
Impact
Fixed a bypass for a reflected cross-site scripting vulnerability affecting OAuth-enabled instances of Mattermost.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost | from 5.32.0 before 5.34.5 from 5.35.0 before 5.35.4 from 5.36.0 before 5.36.1 |