CVE-2016-11083

Description

Mattermost Server: Files may be rendered inline instead of downloaded, allowing script execution in github.com/mattermost/mattermost-server

Affected packages (2)

• Go/github.com/mattermost/mattermost-serverfrom 0, < 2.2.0
• Go/github.com/mattermost/mattermost-serverfrom 0, < 2.2.0+incompatible

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-rm24-25xm-9454
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2016-11083
• PATCHhttps://github.com/mattermost/mattermost
• WEBhttps://github.com/mattermost/mattermost/commit/480308b7029a04cf41d0e9e7cd68b52dc2138e98
• WEBhttps://mattermost.com/security-updates