Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-20630

Mobile crash via object that can't be cast to String in Attachment Field

Description

Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 0 to ≤ <=2.22.0affected
  • 2.23.0unaffected

References