CVE-2025-20072

Publication date

2025-01-16 17:51:38

Family

Mattermost

State

PUBLISHED

Description

Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an actions style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.