CVE-2022-2401

Unrestricted information disclosure of all users in Mattermost version 6.7.0 and earlier allows team members to access some sensitive information by directly accessing the APIs. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt