Impact
Recipients of a group SMTP email could see the email addresses of all other users inside the group SMTP topic. Most of the time this is not an issue as they are likely already familiar with one another's email addresses.
Patches
Patched in latest version. The fix for this is that when we are sending emails out via group SMTP, if we are sending them to non-staged users we want to mask those emails with BCC, just so we don't expose them to anyone we shouldn't. Staged users are ones that have likely only interacted with the group via email, and will likely include other people who were CC'd on the original email to the group.
Workarounds
Disable group SMTP for any groups that have it enabled.
Impact
Recipients of a group SMTP email could see the email addresses of all other users inside the group SMTP topic. Most of the time this is not an issue as they are likely already familiar with one another's email addresses.
Patches
Patched in latest version. The fix for this is that when we are sending emails out via group SMTP, if we are sending them to non-staged users we want to mask those emails with BCC, just so we don't expose them to anyone we shouldn't. Staged users are ones that have likely only interacted with the group via email, and will likely include other people who were CC'd on the original email to the group.
Workarounds
Disable group SMTP for any groups that have it enabled.