Threats tagged 'ghsa-8rm3-f79m-54wg'

Mattermost versions 10.11.x up to 10.11.18, 11.6.x up to 11.6.3, and 11.5.x up to 11.5.6 contain a vulnerability where markdown image rendering restrictions are not properly applied to AI bot tool result posts. This flaw allows an authenticated attacker to exfiltrate data by injecting markdown image syntax into tool result content, which is then rendered by a victim's client. The vulnerability is classified as low severity and does not impact integrity or availability.