Mattermost Mobile
Approved changes feed: RSS · Atom
cpe:2.3:a:mattermost:mattermost_mobile:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc) |
|---|---|
| Product | Mattermost Mobile (d5332d96-09c5-5cf1-b639-35fe6e8c7b7e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mattermost/mattermost-mobile |
purl2cpe | 2026-06-01 10:18:20.078722 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59480 |
vulnerable | 2026-06-08 07:35:22.049991 |
Inadequate validation of SSO redirect credentials permits credential theft
MEDIUM (6.1)
Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses
Published: 2025-11-13T17:32:04.772Z
Updated: 2025-11-13T18:02:26.585Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30516 |
vulnerable | 2026-06-08 07:17:00.558012 |
Unauthorized Notification Exposure in Mobile App Under Specific Conditions
LOW (2)
Mattermost Mobile Apps versions <=2.25.0 fail to terminate sessions during logout under certain conditions (e.g. poor connectivity), allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications
Published: 2025-04-14T06:56:22.327Z
Updated: 2025-04-14T14:01:51.133Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-21083 |
vulnerable | 2026-06-08 07:08:51.150692 |
Insufficient Input Validation on Post Props
MEDIUM (6.5)
Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.
Published: 2025-01-15T16:10:48.325Z
Updated: 2025-01-15T16:48:49.749Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-20630 |
vulnerable | 2026-06-08 07:08:48.555059 |
Mobile crash via object that can't be cast to String in Attachment Field
MEDIUM (6.5)
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.
Published: 2025-01-16T18:18:58.742Z
Updated: 2025-01-16T18:55:51.501Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-20072 |
vulnerable | 2026-06-08 07:08:38.882908 |
Mobile crash via improper validation of proto style in attachments
MEDIUM (6.5)
Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.
Published: 2025-01-16T17:51:38.173Z
Updated: 2025-01-16T19:01:25.308Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-20036 |
vulnerable | 2026-06-08 07:08:38.824635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1558 |
vulnerable | 2026-06-08 07:08:37.293831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0476 |
vulnerable | 2026-06-08 07:02:24.674243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45833 |
vulnerable | 2026-06-08 06:48:09.576420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3872 |
vulnerable | 2026-06-08 06:43:51.719365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39767 |
vulnerable | 2026-06-08 06:41:51.546091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32945 |
vulnerable | 2026-06-08 06:37:24.748535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24975 |
not_vulnerable | 2026-06-08 06:29:42.132575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24975 |
vulnerable | 2026-06-08 06:29:42.132521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11358 |
vulnerable | 2026-06-08 06:23:49.498688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14451 |
vulnerable | 2026-06-08 05:19:23.494959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14449 |
vulnerable | 2026-06-08 05:19:23.493765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20852 |
vulnerable | 2026-06-08 05:13:41.676070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20850 |
vulnerable | 2026-06-08 05:13:41.673076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20849 |
vulnerable | 2026-06-08 05:13:41.672788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20848 |
vulnerable | 2026-06-08 05:13:41.672374 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.