Security Advisory

CVE-2023-47168

4.3
MEDIUM

Vulnerability Description

Mattermost fails to properly check a redirect URL parameter allowing for an open redirect was possible when the user clicked "Back to Mattermost" after providing a invalid custom url scheme in /oauth/{service}/mobile_login?redirect_to=
Published Date November 27, 2023
Official Source NIST NVD Advisory