GitHub Advisoryadvisory · Go
GHSA-g3f3-p9rc-775p Mattermost Server exposes account details to any Team Administrator
MEDIUM
Official page ↗
- Aliases
- CVE-2016-11080
- Ecosystem
- Go
- Packages
- github.com/mattermost/mattermost-server
- Severity
- Moderate
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- Weaknesses
- CWE-200
- Reviewed
- 2025-10-22
Affected packages
• Go github.com/mattermost/mattermost-server: < 3.0.0 → fixed in 3.0.0
Description
An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details.
Related
Alias · CVE (1)
- CVE-2016-11080 An issue was discovered in Mattermost Server before 3.0.0. vulnerability
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness