Launchpad.net

CVE 2017-18893

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. Display names allow XSS.

See the CVE page on Mitre.org for more details.

References