EUVD-2024-34250

Malicious code in bioql PyPI...

CVE-2024-11358

Mattermost Android Mobile Apps versions =2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider...

CVE-2024-11358 Insecure Android File Provider Paths

Mattermost Android Mobile Apps versions =2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider...

PT-2024-16931 · Mattermost · Mattermost Android Mobile Apps

Name of the Vulnerable Software and Affected Versions: Mattermost Android Mobile Apps versions =2.21.0 Description: The issue arises from a misconfiguration of file providers in the Mattermost Android Mobile Apps, allowing an attacker with local access to access files via the file provider. This...

CVE-2024-11358: Improper Access Control

Mattermost Android Mobile Apps versions =2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider...

Mattermost: Persistant Arbitrary code execution in mattermost android

Summary: Activity com.mattermost.share.ShareActivity is is exported and is designed to allow file sharing from third party application to mattermost android app. I have found path tansversal vulnerability at com.mattermost.share.RealPathUtil.java file public static String...