← Back to CVE List

CVE-2021-37866

Published: 2022-01-18T17:15Z
Last Modified: 2024-11-21T06:16Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt