What is the vulnerability ID of this Mattermost Mobile vulnerability?

The vulnerability ID of this Mattermost Mobile vulnerability is CVE-2023-5522.

What is the severity of CVE-2023-5522?

The severity of CVE-2023-5522 is medium with a CVSS score of 4.3.

What is the affected software for CVE-2023-5522?

The affected software for CVE-2023-5522 is Mattermost Mobile on Android (up to version 2.8.0) and Mattermost Mobile on iPhone OS (up to version 2.8.0).

How does this vulnerability impact users of Mattermost Mobile?

This vulnerability allows an attacker to send a post with hundreds of emojis to a channel, which can freeze the mobile app of users when viewing that particular channel.

How can I fix this vulnerability in Mattermost Mobile?

To fix this vulnerability, users should update their Mattermost Mobile app to a version higher than 2.8.0.

Vulnerability/
CVE-2023-5522

medium

4.3

CWE

400

17/10/2023

5/9/2024

CVE-2023-5522: Mobile app freezes when receiving a post with hundreds of emojis

First published: Tue Oct 17 2023(Updated: )

Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel.

Credit: responsibledisclosure@mattermost.com responsibledisclosure@mattermost.com

Affected Software	Affected Version	How to fix
Mattermost Mattermost	<2.8.0
Mattermost Mattermost	<2.8.0

Remedy

Update Mattermost Mobile to versions 2.8.0 or higher.

Never miss a vulnerability like this again

Reference Links

https://mattermost.com/security-updates

Frequently Asked Questions

What is the vulnerability ID of this Mattermost Mobile vulnerability?
The vulnerability ID of this Mattermost Mobile vulnerability is CVE-2023-5522.
What is the severity of CVE-2023-5522?
The severity of CVE-2023-5522 is medium with a CVSS score of 4.3.
What is the affected software for CVE-2023-5522?
The affected software for CVE-2023-5522 is Mattermost Mobile on Android (up to version 2.8.0) and Mattermost Mobile on iPhone OS (up to version 2.8.0).
How does this vulnerability impact users of Mattermost Mobile?
This vulnerability allows an attacker to send a post with hundreds of emojis to a channel, which can freeze the mobile app of users when viewing that particular channel.
How can I fix this vulnerability in Mattermost Mobile?
To fix this vulnerability, users should update their Mattermost Mobile app to a version higher than 2.8.0.

collector/nvd-index
collector/nvd-api
agent/author
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/remedy
agent/severity
agent/references
agent/title
agent/weakness
agent/tags
agent/description
agent/event
agent/first-publish-date
vendor/mattermost
canonical/mattermost mattermost

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.