An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "4.1.2"
},
{
"introduced": "4.2.0"
},
{
"fixed": "4.2.1"
},
{
"introduced": "0"
},
{
"last_affected": "4.3.0-rc1"
},
{
"introduced": "0"
},
{
"last_affected": "4.3.0-rc2"
},
{
"introduced": "0"
},
{
"last_affected": "4.3.0-rc3"
},
{
"introduced": "0"
},
{
"last_affected": "4.3.0-rc4"
}
]
}