CVE-2022-0708: Mattermost

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive & private information disclosure.

Affected products

• Mattermost Mattermost: up to and including 6.3.0

Published 2022-02-21. Last modified 2026-06-17.