Mattermost

Mattermost Boards

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-37866

Exploit
  • EPSS 0.19%
  • Published 18.01.2022 17:15:08
  • Last modified 21.11.2024 06:16:01

Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.

4.3

CVE-2021-37867

  • EPSS 0.23%
  • Published 18.01.2022 17:15:08
  • Last modified 21.11.2024 06:16:01

Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and unauthorized users to access this information resulting in sensitive & private information disclosur...