An issue was discovered in Mattermost Mobile Apps before 1.30.0. Authorization tokens can sometimes be disclosed to third-party servers, aka MMSA-2020-0018.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14449
Reference (s):
- https://mattermost.com/security-updates/