An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy.
CPE | Name | Operator | Version |
---|---|---|---|
mattermost_server | ge | 4.6.0 | |
mattermost_server | lt | 4.6.3 | |
mattermost_server | ge | 4.7.0 | |
mattermost_server | lt | 4.7.4 | |
mattermost_server | ge | 4.8.0 | |
mattermost_server | lt | 4.8.1 |