Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs.
{ "cpes": [ "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", "cpe:2.3:a:mattermost:mattermost_server:6.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:mattermost:mattermost_server:6.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:mattermost:mattermost_server:6.7.0:*:*:*:*:*:*:*" ], "severity": "Medium" }