Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-3872 1 Mattermost 1 Mattermost Mobile 2025-01-21 3.1 Low
Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker to freeze or crash the app via a long maliciously crafted link.
CVE-2020-14451 2 Apple, Mattermost 2 Iphone Os, Mattermost Mobile 2024-11-21 7.5 High
An issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign-On cookies and Local Storage to remain after a logout, aka MMSA-2020-0013.
CVE-2020-14449 1 Mattermost 1 Mattermost Mobile 2024-11-21 7.5 High
An issue was discovered in Mattermost Mobile Apps before 1.30.0. Authorization tokens can sometimes be disclosed to third-party servers, aka MMSA-2020-0018.
CVE-2019-20852 1 Mattermost 1 Mattermost Mobile 2024-11-21 7.5 High
An issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for sensitive information (e.g., server addresses or message content).
CVE-2019-20850 1 Mattermost 1 Mattermost Mobile 2024-11-21 5.3 Medium
An issue was discovered in Mattermost Mobile Apps before 1.26.0. A view cache can persist on a device after a logout.
CVE-2019-20849 1 Mattermost 1 Mattermost Mobile 2024-11-21 5.3 Medium
An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout.
CVE-2019-20848 1 Mattermost 1 Mattermost Mobile 2024-11-21 7.5 High
An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies.