← Database

CVE-2025-20072

MEDIUM CVSS: 6.5 Published: 2025-01-16 Modified: 2026-06-17

Description

Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.

Affected Platforms

Mattermost Mattermost Mobile

Weakness Type

CWE-704

References