CVE-2023-1776
Stored XSS via SVG attachment on Boards
Summary
Stored XSS via SVG attachment on Boards
Original description
The description as published by the source.
Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it using a direct link to the file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com