| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | all versions | |
| github.com/mattermost/mattermost-server/v5 | < 5.39.0 | 5.39.0 |
| mattermost | ≤ 5.38 |
Mattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to inject arbitrary web script in product deployments that explicitly disable the default CSP.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free