CVE-2023-6202 Insecure Direct Object Reference in /plugins/focalboard/ api/v2/users of Mattermost Boards

Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker who is a guest user and knows the ID of another user to get their information e.g. name, surname, nickname via Mattermost Boards...

CVE-2023-6202 Insecure Direct Object Reference in /plugins/focalboard/ api/v2/users of Mattermost Boards

Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker who is a guest user and knows the ID of another user to get their information e.g. name, surname, nickname via Mattermost Boards...

CVE-2023-6202: Improper Access Control

Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker who is a guest user and knows the ID of another user to get their information e.g. name, surname, nickname via Mattermost Boards...

PT-2023-32566 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue is related to improper authorization in the "/plugins/focalboard/api/v2/users" endpoint, allowing an attacker who is a guest user and knows the ID of another user to obtain the...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an information disclosure vulnerability that stems from the inability to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint, which can be exploited by...

CVE-2023-1562

Mattermost fails to check the "Show Full Name" setting when rendering the result for the /plugins/focalboard/api/v2/users API call, allowing an attacker to learn the full name of a board owner...

CVE-2023-1562: Exposure of Sensitive Information to an Unauthorized Actor

Mattermost fails to check the "Show Full Name" setting when rendering the result for the /plugins/focalboard/api/v2/users API call, allowing an attacker to learn the full name of a board owner...

Malicious code in focalboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba56f6781d90607b6ca7eb4956ffb1df4608dfde8bfcd83888757c9a092c4300 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3091 Malicious code in focalboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba56f6781d90607b6ca7eb4956ffb1df4608dfde8bfcd83888757c9a092c4300 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mattermost Code Issue Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A code issue vulnerability exists in Mattermost Focalboard, which stems from the fact that when a user initiates a logout in Mattermost Focalboard, their session does not expire correctly, which can be...

PT-2022-15258

Name of the Vulnerable Software and Affected Versions Mattermost Focalboard versions prior to v0.7.5 Mattermost Focalboard versions prior to v0.8.4 Mattermost Focalboard versions prior to v0.9.5 Mattermost Focalboard versions prior to v0.10.1 Mattermost Focalboard versions prior to v0.11.0-rc1...

编号撤回

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A code issue vulnerability exists in Mattermost Focalboard, which stems from the fact that when a user initiates a logout in Mattermost Focalboard, their session does not expire correctly, which can be...