Mattermost Boards Vulnerabilities

Mattermost Mattermost Boards vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

18 January 2022

Emails of all users are exposed via one of the Boards APIs
CVE-2021-37867
MattermostMattermost Boards4.3MEDIUM
Session is not invalidated on server-side when user logged out of Boards
CVE-2021-37866
MattermostMattermost Boards4.7MEDIUM