CVE-2021-37867: Mattermost Boards

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and unauthorized users to access this information resulting in sensitive & private information disclosure.

Affected products

• Mattermost Mattermost Boards: up to and including 0.10.0

Published 2022-01-18. Last modified 2026-06-17.