ZeroHour

CVE-2025-20630

CVSS 3.1
7.5 high
EPSS
<1%p47
Published
()
Modified
Description

Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.

Vendors
mattermost
Products
mattermost mobile
Weakness
CWE-1287
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.