Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-5160
HistoryOct 02, 2023 - 11:15 a.m.

Design/Logic Flaw

2023-10-0211:15:00
PRIOn knowledge base
www.prio-n.com
6
mattermost
logic flaw
api
teams
user privacy

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowingΒ a member to get the full name of another user even if the Show Full Name option was disabled

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

Related for PRION:CVE-2023-5160