What is CVE-2024-24975?

CVE-2024-24975 is a low-severity vulnerability in Mattermost Mobile, classified under Uncontrolled Resource Consumption. CVSS score: 3.5/10. Published 2024-03-15.

How severe is CVE-2024-24975?

Low severity. CVSS v3 base score is 3.5 out of 10.

Resource exhaustion in Mattermost Mobile

CVE-2024-24975

Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mo…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.004 (32.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L.

Affected products

Mattermost Mobile — versions 2.13.0, 0
Mattermost Mattermost_mobile

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

responsibledisclosure@mattermost.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-24975?: CVE-2024-24975 is a low-severity vulnerability in Mattermost Mobile, classified under Uncontrolled Resource Consumption. CVSS score: 3.5/10. Published 2024-03-15.
How severe is CVE-2024-24975?: Low severity. CVSS v3 base score is 3.5 out of 10.