CVE-2025-20072
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 16, 2025
CWE ID 704
Summary
CVE-2025-20072 is a vulnerability affecting Mattermost Mobile versions prior to 2.22.1. This issue arises due to a failure in the mobile application to adequately validate the style of proto data supplied to an action's style in post.props.attachments. An attacker can exploit this flaw by crafting malicious input, which in turn triggers a crash in the mobile application. The vulnerability poses a potential risk for denial-of-service attacks and should be addressed promptly by updating to the latest version of Mattermost Mobile.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mattermost Mobile
Affected Vendors
- Mattermost, Inc.