CVE-2016-11071

  • Last update: Apr 13, 2023

Description

An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place.

Software From Fixed in
mattermost / mattermost_server - 3.1.0

Details

    • Severity: Medium
  • CVE: CVE-2016-11071
  • Published: Jun 19, 2020
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs

OWASP TOP 10