Description
Mattermost Mobile Apps versions <=2.25.0 fail to terminate sessions during logout under certain conditions (e.g. poor connectivity), allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost | ≤ 2.25.0 | 2.26.0 |
Advisories 1
- WID-SEC-2025-0571 Mattermost Mobile: Schwachstelle ermöglicht Offenlegung von Daten BSI CERT-Bund (WID) · Apr 14, 2025