Skip to content
OpenAdvisories
Medium · 5.7 CVE-2024-11358 EUVD-2024-34250GHSA-pxf8-qv37-3xxp

Insecure Android File Provider Paths

Published Dec 16, 2024 · Updated Dec 16, 2024 · Assigned by Mattermost

Description

Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 2.21.0 2.22.0

References