VULNERABILITY INTELLIGENCE

CVE-2024-32945

CVSS score2.6 LOW
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-07-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

Description

Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.

Weakness classification

  • CWE-909: Missing Initialization of Resource

Primary references