CVE-2025-30516CWE-613

Unauthorized Notification Exposure in Mobile App Under Specific Conditions

Low · published April 14, 2025

CVSS v3.1
2.0
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

Mattermost Mobile Apps versions <=2.25.0  fail to terminate sessions during logout under certain conditions (e.g. poor connectivity), allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications

The record
Technical detail
CVSS v3.1
2.0 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.2th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2025-04-14T06:56Z
EPSS history
Timeline
  • 14 APR 06:56Z
    Unauthorized Notification Exposure in Mobile App Under Specific Conditions
    cvelistv5