medium6.5
CVE-2025-20630
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker …
Impact
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost Mobile | before 2.23.0 |