Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-20036 EUVD-2025-2143GHSA-7w4f-5rcv-q8pc

Insufficient Input Validation on Post Props

Published Jan 15, 2025 · Updated Jan 15, 2025 · Assigned by Mattermost

Description

Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 2.22.0 2.23.0

References