PT-2020-10814

CVE-2019-20851

·

Published

2020-06-19

·

Updated

2020-10-27

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 1.26.0
Description An issue allows an attacker to use directory traversal with the Video Preview feature to overwrite arbitrary files on a device.
Recommendations For versions prior to 1.26.0, update to version 1.26.0 or later to resolve the issue. As a temporary workaround, consider disabling the Video Preview feature until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2019-20851
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com