CVE Vulnerability

CWE-201

CVE-2022-27671

by

A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.

CVE-2022-0708

by

Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive & private information disclosure.