Description
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mattermost Mattermost
Default version status: unaffected
0 to < 7.1.9affected0 to < 7.8.4affected0 to < 7.9.3affected7.1.9unaffected7.8.4unaffected7.9.3unaffected7.10unaffected