CVE-2023-47168 | Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0 Custom URL Scheme mobile_login redirect_to

A vulnerability was found in Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /oauth/{service}/mobile_login of the component Custom URL Scheme Handler. The manipulation of the argument redirect_to leads to open redirect.

The identification of this vulnerability is CVE-2023-47168. The attack may be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.