Mattermost Boards (Mattermost) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-01-18. Vendor: Mattermost.

CVEs of Mattermost Boards

• CVE-2021-37867 - CVSS 4.3 (medium), 2022-01-18: Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and…
• CVE-2021-37866 - CVSS 7.5 (high), 2022-01-18: Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to…