← Database

CVE-2025-0476

MEDIUM CVSS: 4.3 Published: 2025-01-16 Modified: 2026-06-17

Description

Mattermost Mobile Apps versions <=2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment

Affected Platforms

Mattermost Mattermost Mobile

Weakness Type

CWE-1287

References