CVE-2023-5522 — Mobile app freezes when receiving a post with hundreds of emojis

CVE-2023-5522

Mobile app freezes when receiving a post with hundreds of emojis PUBLISHED

Description (CNA)

Mattermost Mobile fails to limit the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and freeze the mobile app of users when viewing that particular channel.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 before 2.8.0; unaffected 2.8.0

CWE

CWE-400

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.