What’s Vulnerable › Vulnerabilities
CVE-2024-24975: Denial of Service for mobile app users due to automatic code highlighting
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-03-15 · updated 2026-06-17
- Weakness: CWE-400
Description
Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app.
Affected products
- Mattermost Mobile: before 2.13.0 — fixed in 2.13.0
How to fix
Upgrade to a fixed version: Mattermost Mobile 2.13.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-24975 or the next vulnerability affects your stack