CVE-2023-7113 (published 2023-12-29T12:46:13.932Z)
Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web client.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 8.1.7, 9.2.0