Unrated severityNVD Advisory· Published Mar 18, 2022· Updated Dec 6, 2024
HTML Injection while inviting Guests
CVE-2022-1002
Description
Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations.
Affected products
1- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- hackerone.com/reports/1443567mitrex_refsource_MISC
- mattermost.com/security-updates/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.