Filtered by vendor Mattermost Subscriptions
Filtered by product Mattermost Boards Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-12756 1 Mattermost 3 Mattermost, Mattermost Boards, Mattermost Server 2025-12-05 4.3 Medium
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate user permissions when deleting comments in Boards, which allows an authenticated user with the editor role to delete comments created by other users.
CVE-2021-37866 1 Mattermost 1 Mattermost Boards 2024-12-07 4.7 Medium
Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.
CVE-2021-37867 1 Mattermost 1 Mattermost Boards 2024-12-07 4.3 Medium
Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and unauthorized users to access this information resulting in sensitive & private information disclosure.