CVE-2024-3872

Name of the Vulnerable Software and Affected Versions Mattermost Mobile app versions 2.13.0 and earlier

Description The issue allows an unauthenticated remote attacker to freeze or crash the app via a long maliciously crafted link, due to the use of a regular expression with polynomial complexity to parse certain deeplinks.

Recommendations For Mattermost Mobile app versions 2.13.0 and earlier, update to a version later than 2.13.0 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.