Mattermost Server Sensitive Data Exposure

GHSA-j2h2-cvwh-cr64 · BIT-mattermost-2020-14457 · CVE-2020-14457 · GO-2023-1939

Published May 24, 2022 · Modified Aug 14, 2025

Description

An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the update_team WebSocket event, aka MMSA-2020-0012.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-14457
WEB https://github.com/mattermost/mattermost/pull/13848
PACKAGE https://github.com/mattermost/mattermost
WEB https://mattermost.com/security-updates

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes