CVE-2021-37867

Mattermost Boards plugin v0.10.0 and earlier is affected by an information-disclosure vulnerability. The root cause is a failure to protect all users’ email addresses via one of the Boards APIs, allowing authenticated and unauthorized users to access sensitive personal data. Affected component: M...

CVE-2021-37866

Mattermost Boards plugin (v0.10.0 and earlier) does not invalidate server-side sessions on user logout, allowing reuse of the old session token for authorization. Documented as CVE-2021-37866 with multiple references (NVD, CVE lists, and country/NVD mirrors). Relevant impact details indicate netw...