CVE-2024-24975lowCWE-400

Denial of Service for mobile app users due to automatic code highlighting

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.4%

probabilidade de exploração

0.4%top 65% das CVEs

exploração observada

nãonenhuma fonte reporta

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Produtos afetados

Mattermost · Mattermost Mobile

Referências

https://mattermost.com/security-updates