Mattermost Mobile vulnerabilities
3 known vulnerabilities in Mattermost Mobile from Mattermost. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Mattermost Mobile Apps versions <=2.25.0 fail to terminate sessions during logout under…
Mattermost Mobile Apps versions <=2.25.0 fail to terminate sessions during logout under certain conditions (e.g. poor connectivity), allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications
- 7.5 High severity
Mattermost: Improper Validation of Specified Type of Input
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.
- 7.5 High severity
Mattermost: Incorrect Type Conversion or Cast
Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.