CVE-2024-32945 — LaTeX post content manipulation via renderer state leak across contexts
Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by cre…
Published: 2024-07-15 · CVSS: 2.6 · CVSS 3.1
Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7