CVE Feed

    Dashboard / CVE / CVE-2024-24975

    CVE-2024-24975

    Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app.

    Published:Mar 15, 2024
    Last Modified:Jan 21, 2025
    EPS:Mar 15, 2024
    EPSS Score:0.00118
    CVSS Score:3.5

    Affected Products

    Vendor
    Mattermost
    Product
    Mattermost Mobile

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-59480 (CVSS 6.1) — Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the trusted se…
    CVE-2025-30516 (CVSS 2) — Mattermost Mobile Apps versions <=2.25.0  fail to terminate sessions during logout under certain conditions (e…
    CVE-2025-1558 (CVSS 6.5) — Mattermost Mobile Apps versions <=2.25.0 fail to properly validate GIF images prior to rendering which allows …
    CVE-2025-20630 (CVSS 6.5) — Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cann…
    CVE-2025-20072 (CVSS 6.5) — Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's styl…
    CVE-2025-0476 (CVSS 4.3) — Mattermost Mobile Apps versions <=2.22.0 fail to properly handle specially crafted attachment names, which all…
    CVE-2025-21083 (CVSS 6.5) — Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authent…
    CVE-2025-20036 (CVSS 6.5) — Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authent…
    CVE-2024-11358 (CVSS 5.7) — Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an att…
    CVE-2024-45833 (CVSS 4.5) — Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High