CVE-2024-11358

Insecure Android File Provider Paths PUBLISHED

Description (CNA)

Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 2.21.0; unaffected 2.22.0

CWE

CWE-284

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.