CVE-2023-2808 (published 2023-05-29T09:07:34.768Z)
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 7.1.9, 7.8.4, 7.9.3, 7.10