CVE-2016-11071

An issue was discovered in Mattermost Server before 3.1.0. It allows XSS because the noreferrer and noopener protection mechanisms were not in place.

View Full Alert

Related Posts

  • CVE-2016-1000229

    swagger-ui has XSS in key names View Full Alert

  • CVE-2016-1000022

    negotiator before 0.6.1 is vulnerable to a regular expression DoS View Full Alert

  • CVE-2016-10761

    Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack. View Full Alert