Mattermost Mattermost Boards — known CVE vulnerabilities

Every CVE whose affected-product data names Mattermost Mattermost Boards, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-37866 — CVSS 4.7 (medium): Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which…
• CVE-2021-37867 — CVSS 4.3 (medium): Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows…