CVE-2024-45833

6.5 mediumEPSS 0.3%

Medium (6.5) in mattermost mattermost mobile. EPSS 0.3% chance of exploitation in the next 30 days.

Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a special character..

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-693
Published: 2024-09-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mattermost:mattermost_mobile

References

https://mattermost.com/security-updates

Check your stack JSON