CVE-2023-1562: Mattermost

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Mattermost fails to check the "Show Full Name" setting when rendering the result for the /plugins/focalboard/api/v2/users API call, allowing an attacker to learn the full name of a board owner.

Affected products

• Mattermost Mattermost: before 7.5.0 (fixed in 7.5.0)

Published 2023-03-22. Last modified 2026-06-17.