CVE-2025-20036

published 2025-01-15

CVE-2025-20036: Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost	<= 2.22.0	—
mattermost	mattermost_mobile	< 2.23.0	2.23.0

CWE-1287