CVE-2023-45223 — Users full name disclosure through Mattermost Boards with Show Full Name Option disabled
Mattermost fails to properly validate the "Show Full Name" option in a few endpoints in Mattermost Boards, allowing a member to get the full name of another user even if the Sho…
Published: 2023-11-27 · CVSS: 4.3 · CVSS 3.1
Mattermost fails to properly validate the "Show Full Name" option in a few endpoints in Mattermost Boards, allowing a member to get the full name of another user even if the Show Full Name option was disabled.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7