CVE Feed

    Dashboard / CVE / CVE-2019-20852

    CVE-2019-20852

    An issue was discovered in Mattermost Mobile Apps before 1.26.0. Local logging is not blocked for sensitive information (e.g., server addresses or message content).

    Published:Jun 19, 2020
    Last Modified:Nov 21, 2024
    EPS:Jun 19, 2020
    EPSS Score:0.00322
    CVSS Score:7.5

    Affected Products

    Vendor
    Mattermost
    Product
    Mattermost Mobile

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-215 Fuzzing for application mapping

    Related CVEs

    CVE-2025-59480 (CVSS 6.1) — Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted se…
    CVE-2025-30516 (CVSS 2) — Mattermost Mobile Apps versions <=2.25.0  fail to terminate sessions during logout under certain conditions (e…
    CVE-2025-1558 (CVSS 6.5) — Mattermost Mobile Apps versions <=2.25.0 fail to properly validate GIF images prior to rendering which allows …
    CVE-2025-20630 (CVSS 6.5) — Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cann…
    CVE-2025-20072 (CVSS 6.5) — Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's styl…
    CVE-2025-0476 (CVSS 4.3) — Mattermost Mobile Apps versions <=2.22.0 fail to properly handle specially crafted attachment names, which all…
    CVE-2025-21083 (CVSS 6.5) — Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authent…
    CVE-2025-20036 (CVSS 6.5) — Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authent…
    CVE-2024-11358 (CVSS 5.7) — Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an att…
    CVE-2024-45833 (CVSS 4.5) — Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High