CVE-2024-32945
LaTeX post content manipulation via renderer state leak across contexts
Summary
LaTeX post content manipulation via renderer state leak across contexts
Original description
The description as published by the source.
Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com