| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost server | ≥ 5.32.0, < 7.7.0 | 7.7.0 |
A reflected cross-site scripting vulnerability in the OAuth flow completion endpoints in Mattermost allows an attacker to send AJAX requests on behalf of the victim via sharing a crafted link with a malicious state parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free