cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2021-37867,https://securityvulnerability.io/vulnerability/CVE-2021-37867,Emails of all users are exposed via one of the Boards APIs,"Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and unauthorized users to access this information resulting in sensitive & private information disclosure.",Mattermost,Mattermost Boards,4.3,MEDIUM,0.000539999979082495,false,false,false,false,,false,false,2022-01-18T16:52:17.000Z,0
CVE-2021-37866,https://securityvulnerability.io/vulnerability/CVE-2021-37866,Session is not invalidated on server-side when user logged out of Boards,"Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.",Mattermost,Mattermost Boards,4.7,MEDIUM,0.0031500000040978193,false,false,false,false,,false,false,2022-01-18T16:52:16.000Z,0