Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider.
- https://mattermost.com/security-updates
No PoCs found on GitHub currently.