An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. XSS can occur via a link on an error page.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18913.json"