CVE-2024-11358 MEDIUM

CVE-2024-11358: Insecure Android File Provider Paths

Vendor Mattermost
Product Mattermost
Weakness CWE-284
Published December 16, 2024
Last update December 16, 2024
View on NVD All CVEs

CVSS base score

5.7/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider.

Key dates

02Disclosure timeline

December 16, 2024 CVE published
December 16, 2024 Record updated