Leakage Of Sensitive Information

fh-wfm-user is vulnerable to leakage of sensitive information. The vulnerability exists because it does not prevent the return of full user profile object of the message receiver when the user clicks onto any message via the message view, leaking the password and other sensitive data about the us...