Security Advisory

CVE-2021-37866

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-18 16:52:16

Last updated 2024-12-06 23:11:40

Assigner Mattermost

State PUBLISHED

Description

Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.

← Browse all CVEs View on cve.org ↗