Slack disclosed on HackerOne: Remote Code Execution in Slack...
hackerone.com

Summary With any in-app redirect - logic/open redirect, HTML or javascript injection it’s possible to execute arbitrary code within Slack desktop apps. This report demonstrates a specifically…