Unrated
Fixed a bypass for a reflected cross-site scripting vulnerability affecting OAuth-enabled instances of Mattermost.
CVE-2021-37859
First seen on SecPulse
References
- advisory mattermost.com