{"id":"CVE-2022-0708","aliases":["EUVD-2022-15783","GHSA-ffmx-32wf-j77f"],"status":"published","title":"Team Creator's Email Address is disclosed to Team Members via one of the APIs","description":"Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive \u0026 private information disclosure.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00804,"percentile":0.57018,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2022-02-21T17:49:29Z","modified":"2026-10-28T02:31:08Z","products":[{"vendor":"mattermost","product":"mattermost"}],"references":[{"url":"https://mattermost.com/security-updates/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0708","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ffmx-32wf-j77f"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0708.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-0708","title":"Team Creator's Email Address is disclosed to Team Members via one of the APIs","description":"Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive \u0026 private information disclosure.","status":"published","published":"2022-02-21T17:49:29Z","modified":"2024-12-06T23:11:05.829Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:41.34666Z"}],"euvd":[{"id":"EUVD-2022-15783","description":"Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive \u0026 private information disclosure.","status":"published","published":"2022-02-21T17:49:29Z","modified":"2024-12-06T23:11:05Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:38.652605Z"}],"ghsa":[{"id":"GHSA-ffmx-32wf-j77f","title":"Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one...","description":"Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive \u0026 private information disclosure.","status":"published","published":"2022-02-22T00:00:21Z","modified":"2023-02-03T05:06:05Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:50.284505Z"}],"nvd":[{"id":"CVE-2022-0708","description":"Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive \u0026 private information disclosure.","status":"published","published":"2022-02-21T18:15:08.957Z","modified":"2026-06-17T04:21:06.243Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:07:12.711288Z"}],"osv":[{"id":"CVE-2022-0708","title":"Team Creator's Email Address is disclosed to Team Members via one of the APIs","description":"Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive \u0026 private information disclosure.","status":"published","published":"2022-02-21T17:49:29Z","modified":"2026-10-28T02:31:08.835161044Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:44:22.824781Z"}]}}