CVE-2023-47168 (published 2023-11-27T09:12:52.781Z)
Mattermost fails to properly check a redirect URL parameter allowing for an open redirect was possible when the user clicked "Back to Mattermost" after providing a invalid custom url scheme in /oauth/{service}/mobile_login?redirect_to=


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 0, 9.0.2, 9.1.1, 7.8.13, 8.1.4