PT-2024-24992
CVE-2024-32945
·
تاريخ النشر
2024-07-15
·
تاريخ التحديث
2024-07-16
الوصف من
CVSS 3.1
2.6
منخفضةالمقاييسAV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Mattermost Mobile Apps versions <=2.16.0
Description
The issue arises from the failure to protect against abuse of a globally shared MathJax state, allowing an attacker to alter the contents of a LaTeX post. This can be achieved by creating another post with specific macro definitions.
Recommendations
For Mattermost Mobile Apps versions <=2.16.0, update to a version greater than 2.16.0 to resolve the issue. As a temporary workaround, consider restricting the use of LaTeX posts until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾