An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. An external link can occur on an error page even if it is not on an allowlist.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "3.6.7"
},
{
"introduced": "3.7.0"
},
{
"fixed": "3.7.5"
},
{
"introduced": "3.8.0"
},
{
"fixed": "3.8.2"
}
]
}