Sensitive Information Disclosure
Mattermost is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper authorization due to failing to properly verify a user's permissions when accessing group information via API requests...