CVE-2024-32945

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions <=2.16.0

Description The issue arises from the failure to protect against abuse of a globally shared MathJax state, allowing an attacker to alter the contents of a LaTeX post. This can be achieved by creating another post with specific macro definitions.

Recommendations For Mattermost Mobile Apps versions <=2.16.0, update to a version greater than 2.16.0 to resolve the issue. As a temporary workaround, consider restricting the use of LaTeX posts until a patch is available.