CVE-2023-2808
Lack of URL normalization allows rendering previews for disallowed domains
Summary
Lack of URL normalization allows rendering previews for disallowed domains
Original description
The description as published by the source.
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com