Launchpad.net

CVE 2017-18921

An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. XSS can occur via a link on an error page.

See the CVE page on Mitre.org for more details.

References