CVE-2021-37861: Mattermost

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails.

Affected products

• Mattermost Mattermost: up to and including 6.0.2

Published 2021-12-09. Last modified 2026-06-17.