CVE-2022-2401

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs.

Score

CVSS 3.1 6.5 Medium

Status

Modified - responsibledisclosure@mattermost.com

Published

2022-07-14

Last modified

2024-12-06

Weaknesses

CWE-200

Affected products

• Mattermost (Mattermost)
• Mattermost Server (Mattermost)

References

• https://mattermost.com/security-updates/