Vulnerabilities > CVE-2023-5522 - Unspecified vulnerability in Mattermost

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

mattermost

NVD

Published: 2023-10-17

Updated: 2023-10-24

Summary

Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel.

Vulnerable Configurations

Part	Description	Count
Application	Mattermost Mattermost Mattermost - Mattermost Mattermost 1.21.0 Mattermost Mattermost 1.21.1 Mattermost Mattermost 1.21.2 Mattermost Mattermost 1.22.0 Mattermost Mattermost 1.22.1 Mattermost Mattermost 1.23.0 Mattermost Mattermost 1.23.1 Mattermost Mattermost 1.24.0 Mattermost Mattermost 1.25.0 Mattermost Mattermost 1.25.1 Mattermost Mattermost 1.26.0 Mattermost Mattermost 1.26.1 Mattermost Mattermost 1.26.2 Mattermost Mattermost 1.27.0 Mattermost Mattermost 1.27.1 Mattermost Mattermost 1.28.0 Mattermost Mattermost 1.29.0 Mattermost Mattermost 1.30.0 Mattermost Mattermost 1.30.1 Mattermost Mattermost 1.31.0 Mattermost Mattermost 1.31.1 Mattermost Mattermost 1.31.2 Mattermost Mattermost 1.32.0 Mattermost Mattermost 1.32.1 Mattermost Mattermost 1.32.2 Mattermost Mattermost 1.33.0 Mattermost Mattermost 1.33.1 Mattermost Mattermost 1.34.0 Mattermost Mattermost 1.34.1 Mattermost Mattermost 1.35.0 Mattermost Mattermost 1.35.1 Mattermost Mattermost 1.36.0 Mattermost Mattermost 1.37.0 Mattermost Mattermost 1.38.0 Mattermost Mattermost 1.38.1 Mattermost Mattermost 1.39.0 Mattermost Mattermost 1.40.0 Mattermost Mattermost 1.41.0 Mattermost Mattermost 1.41.1	80

References

https://mattermost.com/security-updates