CVE-2023-5160
Full name disclosure via team top membership with Show Full Name option disabled
概要
Full name disclosure via team top membership with Show Full Name option disabled
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com