CVE-2024-32945
LaTeX post content manipulation via renderer state leak across contexts
Résumé
LaTeX post content manipulation via renderer state leak across contexts
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Mobile Apps versions <=2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com