CVE-2023-47168
Open redirect in /oauth/<service>/mobile_login?redirect_to=
概要
Open redirect in /oauth/<service>/mobile_login?redirect_to=
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost fails to properly check a redirect URL parameter allowing for an open redirect was possible when the user clicked "Back to Mattermost" after providing a invalid custom url scheme in /oauth/{service}/mobile_login?redirect_to=
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com