CVE-2023-45223: Mattermost

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Mattermost fails to properly validate the "Show Full Name" option in a few endpoints in Mattermost Boards, allowing a member to get the full name of another user even if the Show Full Name option was disabled. 

Affected products

• Mattermost Mattermost: up to and including 7.8.12; from 8.0.0, up to and including 8.1.3

Published 2023-11-27. Last modified 2026-06-17.