Unrated
An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. XSS can occur via a link on an error page.
CVE-2017-18921
First seen on SecPulse
References
- advisory mattermost.com