writeups.xyz / Mattermost Server v5.32 > v5.36 Reflected XSS in OAuth flow

Submitter : c2a

Date: 26 July 2021

Bounty : 900

Vulnerabilities :

• Reflected XSS
• OAuth

Programs :

• Mattermost

Authors :

• Zi0Black (@Zi0Black)

Link :
https://www.shielder.it/advisories/mattermost-server-reflected-xss-oauth/