CVE-2023-5160 (published 2023-10-02T10:46:33.153Z)
Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAM_ID/top/team_members endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled



Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 7.8.10, 8.1.1