Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel.
2023-10-17T10:15:10.427
2024-11-21T08:41:56.090
Modified
CVSSv3.1: 4.3 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | mattermost | mattermost | < 2.8.0 | Yes |
Application | mattermost | mattermost | < 2.8.0 | Yes |