CVE-2023-1776
Stored XSS via SVG attachment on Boards
Résumé
Stored XSS via SVG attachment on Boards
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it using a direct link to the file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com