/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2023-7113

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-7113

CGA ID

CGA-g5ph-9j8j-27f3

Severity

6.1

Medium

CVSS V3

Description

Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client.

References

  • https://images.chainguard.dev/security/CGA-g5ph-9j8j-27f3
  • https://github.com/advisories/GHSA-h3gq-j7p9-x3p4
  • https://mattermost.com/security-updates

Affected packages

Safe Source for Open Source™
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images

Why Chainguard

Container Image SecurityVulnerability RemediationCompliance and Risk MitigationSoftware Supply Chain SecurityAI/ML Security

Customers

Customer StoriesChainguard Love

Company

About UsPricingOpen SourceCareersNewsroomLegal

Resources

Unchained BlogEventsTrust CenterDocumentation