Описание
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.23.0 (исключая)
cpe:2.3:a:mattermost:mattermost_mobile:*:*:*:*:*:*:*:*
EPSS
Процентиль: 36%
0.00154
Низкий
6.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-1287
Связанные уязвимости
CVSS3: 6.5
github
около 1 года назад
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.
EPSS
Процентиль: 36%
0.00154
Низкий
6.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-1287