medium4.3
CVE-2023-2808
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link…
Impact
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost | from 5.34.0 before 7.1.9 from 7.2.0 before 7.8.4 from 7.9.0 before 7.9.3 |