CVE-2024-24975CWE-400

Denial of Service for mobile app users due to automatic code highlighting

Low · published March 15, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00406 · 33.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-03-15T09:07Z
EPSS history
Timeline
  • 15 MAR 09:07Z
    Denial of Service for mobile app users due to automatic code highlighting
    cvelistv5