CVE-2023-5522
First published: Tue Oct 17 2023(Updated: )
Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel.
Credit: responsibledisclosure@mattermost.com responsibledisclosure@mattermost.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mattermost Mattermost | <2.8.0 | |
| Mattermost Mattermost | <2.8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this Mattermost Mobile vulnerability?
The vulnerability ID of this Mattermost Mobile vulnerability is CVE-2023-5522.
What is the severity of CVE-2023-5522?
The severity of CVE-2023-5522 is medium with a CVSS score of 4.3.
What is the affected software for CVE-2023-5522?
The affected software for CVE-2023-5522 is Mattermost Mobile on Android (up to version 2.8.0) and Mattermost Mobile on iPhone OS (up to version 2.8.0).
How does this vulnerability impact users of Mattermost Mobile?
This vulnerability allows an attacker to send a post with hundreds of emojis to a channel, which can freeze the mobile app of users when viewing that particular channel.
How can I fix this vulnerability in Mattermost Mobile?
To fix this vulnerability, users should update their Mattermost Mobile app to a version higher than 2.8.0.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-api
- collector/nvd-index
- vendor/mattermost
- canonical/mattermost mattermost