Medium severity · published Mar 15, 2024
CVE-2024-24975
Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing…
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Mattermost Mobile · Mattermost
before 2.13.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-24975
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-24975
Vendor Advisory
https://mattermost.com/security-updates
More from Mattermost Mobile
7.5
CVE-2025-30516
Mattermost Mobile Apps versions <=2.25.0 fail to terminate sessions during logout under certain conditions (e.g
7.5
CVE-2025-20630
Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile…
7.5
CVE-2025-20072
Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the…
7.5
CVE-2019-20852
An issue was discovered in Mattermost Mobile Apps before 1.26.0
7.5
CVE-2020-14451
An issue was discovered in Mattermost Mobile Apps before 1.29.0