Security Advisory

CVE-2021-37860

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-09-22 16:40:43

Last updated 2024-08-04 01:30:09

Assigner Mattermost

CVSS score 3.7

State PUBLISHED

Description

Mattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to inject arbitrary web script in product deployments that explicitly disable the default CSP.

← Browse all CVEs View on cve.org ↗