Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-20072 EUVD-2025-2148GHSA-778q-j98c-h63p

Mobile crash via improper validation of proto style in attachments

Published Jan 16, 2025 · Updated Jan 16, 2025 · Assigned by Mattermost

Description

Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 2.22.0 2.23.0

References