An issue was discovered in Mattermost Server before 3.2.0. The initial_load API disclosed unnecessary personal information.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://mattermost.com/security-updates/ | vendor advisory |