CVE-2025-20630
Mobile crash via object that can't be cast to String in Attachment Field
Résumé
Mobile crash via object that can't be cast to String in Attachment Field
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com