CVE-2023-2808
Lack of URL normalization allows rendering previews for disallowed domains
概要
Lack of URL normalization allows rendering previews for disallowed domains
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com