Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/mattermost/mattermost-server/v6(Go) | 0 | 6.3.9 | N/A |
| github.com/mattermost/mattermost-server/v6(Go) | 6.4.0 | 6.5.2 | N/A |
| github.com/mattermost/mattermost-server/v6(Go) | 6.6.0 | 6.6.2 | N/A |
| github.com/mattermost/mattermost-server/v6(Go) | 6.7.0 | 6.7.1 | N/A |
CVSS Metrics
