UpHeron
All vulnerabilities

Servers and applications

CVE-2023-6202

Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker who is a guest user and knows the ID of another user to get their information (e.g. name, surname, nickname) via Mattermost Boards.

Severity
Medium 4.3
Published
27 Nov 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MattermostServers and applications · cpe:a:mattermost:mattermost
  • Every version up to 7.8.12
  • From 8.0.0 up to 8.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-6202
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-6202