medium4.3
CVE-2023-5160
Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another us…
Impact
Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost | from 7.0.0 before 7.8.10 from 8.0.0 before 8.1.1 |