Описание
Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker to freeze or crash the app via a long maliciously crafted link.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.13.0 (включая)
cpe:2.3:a:mattermost:mattermost_mobile:*:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00448
Низкий
3.1 Low
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-400
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 3.1
github
почти 2 года назад
Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which allows an unauthenticated remote attacker to freeze or crash the app via a long maliciously crafted link.
EPSS
Процентиль: 63%
0.00448
Низкий
3.1 Low
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-400
NVD-CWE-noinfo