Mattermost Mobile Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Mattermost Mobile versions through 2.22.0. The issue arises because the application fails to properly validate the style of proto provided to an action's style in post.props.attachments. This lack of validation allows an attacker to crash the mobile application by sending crafted malicious input.

Impact

Exploitation of this vulnerability leads to a crash of the Mattermost Mobile application, causing a denial-of-service condition on the device.