| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost server | ≥ 5.12.0, < 7.7.0 | 7.7.0 |
Mattermost fails to honor the ShowEmailAddress setting when constructing a response to the /api/v4/users/me/teams API endpoint, allowing an attacker with team admin privileges to learn the team owner's email address in the response.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free