Description
Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost | unspecified – ≤ 6.0.2 | — |
Medium · 5.8
CVE-2021-37861
EUVD-2021-24339GHSA-hvvh-wh5g-3ppr
Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails.
Published Dec 9, 2021 · Updated Aug 4, 2024 · Assigned by Mattermost