CVE-2023-45223 — Users full name disclosure through Mattermost Boards with Show Full Name Option disabled

CVE-2023-45223

Users full name disclosure through Mattermost Boards with Show Full Name Option disabled PUBLISHED

Description (CNA)

Mattermost fails to properly validate the "Show Full Name" option in a few endpoints in Mattermost Boards, allowing a member to get the full name of another user even if the Show Full Name option was disabled.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 7.8.12; affected 0 through 8.1.3; unaffected 7.8.13; unaffected 8.1.4

CWE

CWE-200

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates