CVE-2023-7114 (published 2023-12-29T12:46:22.501Z)
Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 2.10.1