MM
Product
Mattermost Mobile
21
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 14Low 0
Watch
Add Mattermost Mobile to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30516 | 7.5 | Apr 14 | Mattermost Mobile Apps versions <=2.25.0 fail to terminate sessions during logout under certain conditions (e.g Affected: before 2.26.0 |
| CVE-2025-20630 | 7.5 | Jan 16 | Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile… Affected: before 2.23.0 |
| CVE-2025-20072 | 7.5 | Jan 16 | Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the… Affected: before 2.23.0 |
| CVE-2019-20852 | 7.5 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.26.0 Affected: before 1.26.0 |
| CVE-2020-14451 | 7.5 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.29.0 Affected: before 1.29.0 |
| CVE-2020-14449 | 7.5 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.30.0 Affected: before 1.30.0 |
| CVE-2019-20848 | 7.5 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.26.0 Affected: before 1.26.0 |
| CVE-2025-59480 | 6.5 | Nov 13 | Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path… Affected: before 2.33.0 |
| CVE-2025-1558 | 6.5 | Mar 24 | Mattermost Mobile Apps versions <=2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via… Affected: before 2.25.1 |
| CVE-2025-21083 | 6.5 | Jan 15 | Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post Affected: before 2.23.0 |
| CVE-2025-20036 | 6.5 | Jan 15 | Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post Affected: before 2.23.0 |
| CVE-2024-45833 | 6.5 | Sep 16 | Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get… Affected: before 2.19.0 |
| CVE-2024-39767 | 6.5 | Jul 15 | Mattermost Mobile Apps versions <=2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a malicious server to… Affected: before 2.17.0 |
| CVE-2024-3872 | 6.5 | Apr 16 | Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker… Affected: through 2.13.0 |
| CVE-2024-24975 | 6.5 | Mar 15 | Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing… Affected: before 2.13.0 |
| CVE-2026-22880 | 6.1 | May 21 | Mobile SSO authentication flow allows credential theft via malicious server Affected: before 2.37.1 |
| CVE-2024-11358 | 5.5 | Dec 16 | Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider Affected: before 2.22.2 |
| CVE-2024-32945 | 5.3 | Jul 15 | Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by… Affected: before 2.17.0 |
| CVE-2019-20850 | 5.3 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.26.0 Affected: before 1.26.0 |
| CVE-2019-20849 | 5.3 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.26.0 Affected: before 1.26.0 |
| CVE-2025-0476 | 4.3 | Jan 16 | Mattermost Mobile Apps versions <=2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a… Affected: before 2.23.0 |
Showing 21