Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xq9p-hq98-j4x4

Опубликовано: 15 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 2.6

Описание

Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.

Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.

EPSS

Процентиль: 56%
0.00334
Низкий

2.6 Low

CVSS3

Дефекты

CWE-909

Связанные уязвимости

CVSS3: 2.6
nvd
больше 1 года назад

Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.

EPSS

Процентиль: 56%
0.00334
Низкий

2.6 Low

CVSS3

Дефекты

CWE-909