Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.
Solution:
The product does not correctly convert an object, resource, or structure from one type to a different type.
Link | Tags |
---|---|
https://mattermost.com/security-updates |