VULNERABILITY INTELLIGENCE

CVE-2024-24975

CVSS score3.5 LOW
EPSS probability0.41%
CISA KEVNot currently listed
Published2024-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Description

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app.

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-400
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references