| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | ≥ 7.1.0, < 7.1.6≥ 7.7.0, < 7.7.2≥ 7.8.0, < 7.8.1 | 7.1.67.7.27.8.1 |
| github.com/mattermost/mattermost-server/v5 | ≥ 5.0.0, < 7.1.6 | 7.1.6 |
| github.com/mattermost/mattermost-server/v6 | ≥ 3.3.0, < 7.1.6≥ 6.0.0, < 7.1.6 | 7.1.6 |
| mattermost server | = 7.7.1< 7.1.6 | 7.1.6 |
Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it using a direct link to the file.
Issue Identifier: MMSA-2023-00139
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free