Vulnerability Database

296,213

Total vulnerabilities in the database

CVE-2023-27266

Mattermost fails to honor the ShowEmailAddress setting when constructing a response to the /api/v4/users/me/teams API endpoint, allowing an attacker with team admin privileges to learn the team owner's email address in the response.

  • Published: Feb 27, 2023
  • Updated: Nov 8, 2023
  • CVE: CVE-2023-27266
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.7
  • AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
mattermost / mattermost_server 5.12.0 7.7.0