CVE-2021-37867

—

CVSS 3.1

4.3 medium

EPSS

<1%p50

Published

Jan 18, 2022 (Jan 18, 2022)

Modified

Jun 17, 2026

Description

Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and unauthorized users to access this information resulting in sensitive & private information disclosure.

Vendors: mattermost
Products: mattermost boards
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.