Mattermost Mattermost Boards

• CVE-2021-37867 Medium 4.3 Emails of all users are exposed via one of the Boards APIs 0.7%
• CVE-2021-37866 Medium 4.7 Session is not invalidated on server-side when user logged out of Boards 0.7%