CVE-2023-2808
Lack of URL normalization allows rendering previews for disallowed domains
Résumé
Lack of URL normalization allows rendering previews for disallowed domains
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com