← Database

CVE-2022-2401

MEDIUM CVSS: 6.5 Published: 2022-07-14 Modified: 2026-06-17

Description

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs.

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-200, CWE-200

References