← Database

CVE-2021-37866

MEDIUM CVSS: 4.7 Published: 2022-01-18 Modified: 2026-06-17

Description

Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.

Affected Platforms

Mattermost Mattermost Boards

Weakness Type

CWE-613, CWE-613

References