Authorization

Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization...

CVE-2021-37867

Mattermost Boards plugin v0.10.0 and earlier is affected by an information-disclosure vulnerability. The root cause is a failure to protect all users’ email addresses via one of the Boards APIs, allowing authenticated and unauthorized users to access sensitive personal data. Affected component: M...

CVE-2021-37866

Mattermost Boards plugin (v0.10.0 and earlier) does not invalidate server-side sessions on user logout, allowing reuse of the old session token for authorization. Documented as CVE-2021-37866 with multiple references (NVD, CVE lists, and country/NVD mirrors). Relevant impact details indicate netw...

Mattermost 代码问题漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. The Mattermost Boards plugin in v0.10.0 and prior versions is vulnerable to a trust management issue that stems from the lack of an effective trust management mechanism in the network system or product. An attacker could...

Mattermost 信息泄露漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. The Mattermost Boards plugin in v0.10.0 and earlier is vulnerable to an information disclosure vulnerability that stems from a failure to protect all users' email addresses via one of the Board APIs, which could be exploite...