Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4f96-v6r6-c7jh

Опубликовано: 02 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled

Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled

EPSS

Процентиль: 46%
0.00229
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
nvd
больше 1 года назад

Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled

CVSS3: 4.3
debian
больше 1 года назад

Mattermost fails to check the Show Full Name option at the /api/v4/tea ...

EPSS

Процентиль: 46%
0.00229
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200