MM
Product
Mattermost Mobile
21
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 14Low 0
Watch
Add Mattermost Mobile to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30516 | 7.5 | Apr 14 | Unauthorized Notification Exposure in Mobile App Under Specific Conditions Affected: before 2.26.0 |
| CVE-2025-20630 | 7.5 | Jan 16 | Mobile crash via object that can't be cast to String in Attachment Field Affected: before 2.23.0 |
| CVE-2025-20072 | 7.5 | Jan 16 | Mobile crash via improper validation of proto style in attachments Affected: before 2.23.0 |
| CVE-2019-20852 | 7.5 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.26.0 Affected: before 1.26.0 |
| CVE-2020-14451 | 7.5 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.29.0 Affected: before 1.29.0 |
| CVE-2020-14449 | 7.5 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.30.0 Affected: before 1.30.0 |
| CVE-2019-20848 | 7.5 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.26.0 Affected: before 1.26.0 |
| CVE-2025-59480 | 6.5 | Nov 13 | Inadequate validation of SSO redirect credentials permits credential theft Affected: before 2.33.0 |
| CVE-2025-1558 | 6.5 | Mar 24 | Denial of Service Via Malicious GIF Affected: before 2.25.1 |
| CVE-2025-21083 | 6.5 | Jan 15 | Insufficient Input Validation on Post Props Affected: before 2.23.0 |
| CVE-2025-20036 | 6.5 | Jan 15 | Insufficient Input Validation on Post Props Affected: before 2.23.0 |
| CVE-2024-45833 | 6.5 | Sep 16 | Mobile password gets saved in dictionary under conditions Affected: before 2.19.0 |
| CVE-2024-39767 | 6.5 | Jul 15 | Spoofed push notifications from malicious server Affected: before 2.17.0 |
| CVE-2024-3872 | 6.5 | Apr 16 | Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker… Affected: through 2.13.0 |
| CVE-2024-24975 | 6.5 | Mar 15 | Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing… Affected: before 2.13.0 |
| CVE-2026-22880 | 6.1 | May 21 | Mobile SSO authentication flow allows credential theft via malicious server Affected: before 2.37.1 |
| CVE-2024-11358 | 5.5 | Dec 16 | Insecure Android File Provider Paths Affected: before 2.22.2 |
| CVE-2024-32945 | 5.3 | Jul 15 | LaTeX post content manipulation via renderer state leak across contexts Affected: before 2.17.0 |
| CVE-2019-20850 | 5.3 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.26.0 Affected: before 1.26.0 |
| CVE-2019-20849 | 5.3 | Jun 19 | An issue was discovered in Mattermost Mobile Apps before 1.26.0 Affected: before 1.26.0 |
| CVE-2025-0476 | 4.3 | Jan 15 | Mobile crash via file with specially crafted filename Affected: before 2.23.0 |
Showing 21