CVE-2024-11358

Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider.

Score

CVSS 3.1 5.7 Medium

Status

Analyzed - responsibledisclosure@mattermost.com

Published

2024-12-16

Last modified

2024-12-16

Weaknesses

CWE-284

Affected products

• Mattermost (Mattermost)
• Mattermost Mobile (Mattermost)

References

• https://mattermost.com/security-updates