Medium severity4.3NVD Advisory· Published May 29, 2023· Updated Jun 17, 2026
CVE-2023-2808
CVE-2023-2808
Description
Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*range: >=5.34.0,<7.1.9
- (no CPE)
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- mattermost.com/security-updates/nvdVendor Advisory
News mentions
0No linked articles in our index yet.