high7.1
CVE-2023-7114
Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.
Impact
Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost | before 2.10.1 |