id: GO-2022-0604
modules:
    - module: github.com/mattermost/mattermost-server
      vulnerable_at: 9.11.0+incompatible
    - module: github.com/mattermost/mattermost-server/v5
      versions:
        - fixed: 5.39.0
      vulnerable_at: 5.38.4
summary: Cross-site Scripting in Mattermost in github.com/mattermost/mattermost-server
cves:
    - CVE-2021-37860
ghsas:
    - GHSA-hv5f-73mr-7vvj
references:
    - advisory: https://github.com/advisories/GHSA-hv5f-73mr-7vvj
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2021-37860
    - web: https://docs.mattermost.com/install/self-managed-changelog.html#release-v5-39-quality-release
    - web: https://github.com/mattermost/mattermost-server
    - web: https://mattermost.com/security-updates
source:
    id: GHSA-hv5f-73mr-7vvj
    created: 2024-08-20T14:06:46.963305-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE