CVE-2025-20630
Mobile crash via object that can't be cast to String in Attachment Field
Summary
Mobile crash via object that can't be cast to String in Attachment Field
Original description
The description as published by the source.
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com