Mattermost Boards
Approved changes feed: RSS · Atom
cpe:2.3:a:mattermost:mattermost_boards:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc) |
|---|---|
| Product | Mattermost Boards (802dbb57-d12a-5941-a5ab-3e684beba11a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-37867 |
vulnerable | 2026-06-03 14:45:01.211685 |
Emails of all users are exposed via one of the Boards APIs
MEDIUM (4.3)
Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and unauthorized users to access this information resulting in sensitive & private information disclosure.
Published: 2022-01-18T16:52:17.000Z
Updated: 2024-12-06T23:11:27.811Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37866 |
vulnerable | 2026-06-03 14:45:01.211120 |
Session is not invalidated on server-side when user logged out of Boards
MEDIUM (4.7)
Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.
Published: 2022-01-18T16:52:16.000Z
Updated: 2024-12-06T23:11:40.140Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.