CVE-2024-32945
LaTeX post content manipulation via renderer state leak across contexts
概要
LaTeX post content manipulation via renderer state leak across contexts
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com