PT-2025-4189

CVE-2025-21083

·

Published

2025-01-15

·

Updated

2025-01-15

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions <=2.22.0
Description The issue arises from the failure to properly validate post properties, allowing a malicious authenticated user to cause a crash via a malicious post. This can be exploited by an authenticated user, indicating a need for proper access controls and validation mechanisms.
Recommendations For Mattermost Mobile Apps versions <=2.22.0, update to a version greater than 2.22.0 to resolve the issue. As a temporary workaround, consider restricting access to post properties to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾