Description
Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an attacker to cause a denial-of-service by a linking to a specially crafted webpage in a message.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mattermost Mattermost
Default version status: unaffected
0 to ≤ 7.8.2affected0 to ≤ 7.9.1affected7.10.1unaffected7.8.3unaffected7.9.2unaffected7.10.0affected