Security Advisory
CVE-2025-20630
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.