Information disclosure via undisclosed timing flaw

Timing vulnerability in Mattermost Server before 5.3.0 allows remote attackers to obtain limited information via network timing measurements. The affected timing-sensitive locus and the incorrect operation on untrusted input have not been disclosed in the CNA record or Mattermost advisory. Exploitation requires repeated network observations; the documented impact is limited confidentiality exposure, with no integrity or availability effect reported.