CVE-2024-32945

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-32945
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-32945.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-32945
Published
2024-07-15T09:15:02Z
Modified
2025-02-18T19:52:41Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.

References

Affected packages

Git / github.com/mattermost/mattermost-mobile

Affected ranges

Type
GIT
Repo
https://github.com/mattermost/mattermost-mobile
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed